storeStateInSession(request.getSession(), state, nonce);
        final String authUrl;

        if (useV2Endpoint) {
            // v2.0 endpoint with MSAL4J (recommended)
            authUrl = getAuthority() + getTenant()
                    + "/oauth2/v2.0/authorize?response_type=code&scope=https://graph.microsoft.com/.default&response_mode=form_post&redirect_uri="

                if (!normalizedPath.startsWith("/")) {
                    normalizedPath = "/" + normalizedPath;
                }
                childUrlStr = childUrl.getProtocol() + "://" + childUrl.getAuthority() + normalizedPath;
                if (childUrl.getQuery() != null) {
                    childUrlStr += "?" + childUrl.getQuery();
                }
            }