but it can't be used with the IoT SDK:
https://github.com/Azure/azure-sdk-for-js/issues/2556#issuecomment-497505818
So, I ripped it out again and added the authentication flow using
ms-rest-browserauth (https://github.com/Azure/ms-rest-browserauth) ...
Now I encountered a bug which enters the app in an endless redirect loop:
https://github.com/Azure/ms-rest-browserauth/issues/21