Are RERs really tight to ACS? We switched our backend communication to Azure AD Apps with Sites.Selected app permissions. If our app gets granted FullControl access to SharePoint sites, the RERs we created on lists start calling our backend. So, we do not use an old SharePoint app with clientID and clientSecret anymore. That made us think that RERs are save to use with Azure AD apps. Is that incorrect?
Second point of interest: we do use the SharePoint Framework (SPFx) to add web parts to the customers SharePoint. So that sounds like a supported scenario, not going away like the older add-in models. When we use SPFx that results in sppkg files, which need an app catalog in the customers SharePoint.
How would one use SPFx based web parts with this statement in mind "Using a tenant app catalog will stay supported and enables 3rd parties to offer their SharePoint Add-Ins until April 2nd, 2026."?
Will app catalogs go away?
We use the global tenant app catalog and/or site collection specific app catalogs, as needed in customer projects.