Using Content Delivery API tokens for editing Member data

Hi all!

I have been trying to access custom API endpoints within Umbraco 15 from inside our companion mobile app. These endpoints rely on Members being logged in to access information stored against that Member. These Members should sign in with their Microsoft Entra ID. This all works on the web but I have not been able to get it working in the mobile app.

I can log in Members using the Content Delivery API, and I receive an access token which I can then use to access protected content through the Content Delivery API. I’d like to be able to read and edit Member details from the mobile app, but I haven’t been able to get this to work. I’ve been trying to configure our custom API to access the Member details so that it will recognise the Content Delivery API tokens but I’m not sure if this is the best approach. Is there a way to either a) get my controllers to accept the Content Delivery API access tokens or b) create a different kind of endpoint that can edit the Member profile?

TL;DR: How could a Member authenticate with Entra ID and then read/update their profile via API calls?

Thanks in advance!