AzureTeach•Net
AzureTeach•Net
  • Видео 75
  • Просмотров 708 038
Access Token Vs ID Token | Differences between ID Token vs Access Token
Access Token vs ID Token | ID Token vs Access Token | Differences between access token and id token | Why do we need ID Token?
What are Access Tokens and ID Tokens?
Access tokens and ID tokens are cryptographic tokens used to authenticate users and grant them access to protected resources. While they may seem similar at first glance, they serve distinct purposes and operate in different contexts.
Access Tokens:
Purpose: Used to authorize a user to access specific resources or perform actions within an application.
Scope: Grants access to a defined set of resources or APIs.
Lifetime: Typically short-lived, often limited to a few hours or minutes.
Issuance: Issued by an authorization server in res...
Просмотров: 325

Видео

WebApi Azure AD Authentication How It Works? | Azure Active Directory Authentication
Просмотров 2953 месяца назад
Azure AD Authentication HOW TO | WebApi Azure AD Authentication| Azure AD Authentication | .Net Azure AD Authentication| Microsoft Entra Authentication| .Net Azure Active Directory Authentication This is A demo of Azure AD Authentication with Web API. To configure Azure AD authentication on Web API below steps should be performed. 1. Create an app registration 2. Generate Application Id URI 3. ...
Azure AD Assign Roles To User
Просмотров 1593 месяца назад
How to Assign Roles to User in Azure AD?|Azure AD Assign Roles To User?|Azure AD Roles on API | Role Assignment in Azure AD | User Role Assignment in Azure| Microsoft Entra Azure User Role Assignments | Entra Azure User Roles | Azure User Roles.
Azure AD Web Api Authentication Multitenant | .Net6 Web API Azure AD Multi Tenant Authentication
Просмотров 6243 месяца назад
Azure AD Web Api Authentication Multitenant | .Net6 Web API Azure AD Multi Tenant Authentication | Azure AD Multi Tenant Authentication | Multi Tenant Authentication Web Api Azure AD | Authenticate Web API with multiple Azure Accounts | .Net Core 6 Azure AD multi tenant Authentication .Net6 Web Api Azure AD Multi Tenant authentication and authorization is demonstrated in this video with example...
Azure AD Authorization Code Flow With Proof Key For Code Exchange(PKCE) | Azure AD Authentication
Просмотров 3,4 тыс.10 месяцев назад
OAuth 2.0 Authorization Code Flow With Proof Key For Code Exchange(PKCE) | Azure Active Directory PKCE | Azure AD PKCE | PKCE Flow | Azure AD authentication | Asp.net Core PKCE | Azure Active Directory PKCE with Postman | Asp.net Core Proof Code for Code Exchange | Advantage of Authorization Code Flow | Why PKCE authorization flow is need | Testing Azure AD Authorization Code flow with Postman ...
Swagger Azure AD Client Credentials Flow with net core web api
Просмотров 3,2 тыс.Год назад
swagger azure ad client credentials|swagger client credentials flow with web api and azure adactive directory|Swagger Azure AD Authentication with Client Id And Client Secret Swagger Authentication with Azure AD Using client Id and Client Secret in .net 6 Web API which have Azure AD authentication needs two app registrations. One for Swagger Client which needs Azure AD authentication and other ...
Roles and Scopes in Azure Identity | azure ad roles scopes | oauth2.0 roles vs scopes
Просмотров 4,3 тыс.Год назад
Role vs scope in Azure AD | azure ad roles scopes | oauth2.0 roles vs scopes | Roles , Scopes differences| Roles and Scopes in Azure Identity Roles manage User’s access and Scopes manage Application’s access. Below is the details description for Azure AD Roles Vs scopes Roles in Azure Active Directory Oauth 2.0 is a mechanism to restrict access of the user in application. Roles in Azure Identit...
Download Multiple Files From Azure Storage Account | Web Api Download Files From Azure Storage
Просмотров 4,1 тыс.Год назад
Download Multiple Files From Azure Storage Account | Web Api Download Files From Azure Storage | .Net6 Web API download multiple files from storage account | Azure Storage Account download Zip file .Net core This Download Multiple Files From Azure Storage Account as zip video has the demonstration of creating the zip file with multiple files on the fly in memory and returning as response from W...
Web Api Download Multiple Files
Просмотров 3,7 тыс.2 года назад
Web Api Download Multiple Files | .Net core Web API Download multiple files |.net6 api download file | Multiple Files Download using Web API | Download multiple files with Web API | Web API In memory zip file How to Web API Download Multiple Files ? This Web API download files video has the answer. Here the idea is, create an in memory zip file with all the files .Net core and add all the requi...
swagger azure ad authentication | web api azure ad authentication | Swagger Azure AD Login
Просмотров 15 тыс.2 года назад
swagger azure ad authentication | web api azure ad authentication | Swagger Azure AD Login | .Net6 Web API Azure AD Authentication How to integrate Swagger with Azure Active directory(Azure AD) - This swagger azure ad video has the answer. Swagger uses open api specification and we can use it to integrate with any authentication provider like azure ad. For Swagger azure ad login first the appli...
async await c#|async await for beginners
Просмотров 1,7 тыс.2 года назад
async await c# | async await for beginners | async await asp.net core | async await in .net core | async await webapi | async await javascript | asp.net core async await | async await in c# | how async await works async await c# - await async keywords are used to write asynchronous programming in c#. async await in .net core is a vast topic and in this video I tried to explain it in easiest way...
Net6 Web Api Azure AD Authentication And Authorization With Azure Ad Groups
Просмотров 22 тыс.2 года назад
Net6 Web Api Azure AD Authentication And Authorization With Azure Ad Groups | Using Azure AD groups authorization in ASP.NET Core | How to do Authorization based on Azure AD groups and Authenticate using Azure AD in .net core application? How to implement Web Api Azure AD Authentication and AD Groups authorization? This video has the answer for doing that. Azure AD Authorization using AD groups...
Azure SAS | Azure Shared Access Signature | Storage Account Shared Access
Просмотров 6 тыс.2 года назад
Azure SAS | Azure Shared Access Signature | Storage Account Shared Access | How to generate Storage Account Shared Access Signature with .Net core program | Web API Generate Storage SAS Shared Access Signature aka Azure storage Account SAS is a way of accessing storage account with restrictions. we can set start and expiry dates for azure storage shared access token. Storage Account Shared Acce...
Web Api+Azure Storage Account Download File|Download File from Azure storage
Просмотров 6 тыс.2 года назад
Web Api Azure Storage Account Download File|Download File from Azure storage | How to download azure file from asp.net core webapi| Download file from blob storage Downloading file from azure storage account through web api can be done with very simple code. Azure SDK provided many classes to download file from azure storage account using web api. We can go in hierarchy of the classes ranging f...
Web Api Upload File|Upload File To Azure Storage Account
Просмотров 9 тыс.2 года назад
Web Api Upload File|Upload File To Azure Storage Account
Azure Web Jobs Complete Reference|Webjobs Tutorial
Просмотров 5 тыс.2 года назад
Azure Web Jobs Complete Reference|Webjobs Tutorial
Azure Webjob aborted|Azure Webjobs Issues | Azure Web jobs tutorial | Webjobs in Azure Portal
Просмотров 1,7 тыс.2 года назад
Azure Webjob aborted|Azure Webjobs Issues | Azure Web jobs tutorial | Webjobs in Azure Portal
Azure Web Jobs | Azure Scheduled Web Job Complete Tutorial | Azure Send Email
Просмотров 11 тыс.2 года назад
Azure Web Jobs | Azure Scheduled Web Job Complete Tutorial | Azure Send Email
Web Api Calling Web Api Azure AD(Active Directory) Authentication and Authorization
Просмотров 17 тыс.2 года назад
Web Api Calling Web Api Azure AD(Active Directory) Authentication and Authorization
How to Create an API with Minimal APIs | Minimal API upload file
Просмотров 1,7 тыс.2 года назад
How to Create an API with Minimal APIs | Minimal API upload file
Net6 Minimal Api | Azure AD Authentication and Authorization
Просмотров 12 тыс.2 года назад
Net6 Minimal Api | Azure AD Authentication and Authorization
Minimal api dotnet 6 | .net 6 Minimal Api Download File
Просмотров 1,7 тыс.2 года назад
Minimal api dotnet 6 | .net 6 Minimal Api Download File
Net6 Minimal Api Upload File | Asp net Core 6 Minimal API File Upload
Просмотров 4,8 тыс.2 года назад
Net6 Minimal Api Upload File | Asp net Core 6 Minimal API File Upload
Angular App Azure Deployment | Azure Devops | Azure Static Web Hosting
Просмотров 4,3 тыс.2 года назад
Angular App Azure Deployment | Azure Devops | Azure Static Web Hosting
Web Api Authentication And Authorization Using Azure ad | add roles to user
Просмотров 30 тыс.2 года назад
Web Api Authentication And Authorization Using Azure ad | add roles to user
Angular Azure ad Authentication MSAL | Azure Graph Api In Angular
Просмотров 4,5 тыс.2 года назад
Angular Azure ad Authentication MSAL | Azure Graph Api In Angular
Web Api Authentication And Authorization With Azure ad | Angular Azure ad Authentication
Просмотров 38 тыс.2 года назад
Web Api Authentication And Authorization With Azure ad | Angular Azure ad Authentication
Angular Azure Active Directory(ad) Authentication Using msal
Просмотров 36 тыс.2 года назад
Angular Azure Active Directory(ad) Authentication Using msal
Angular Web API Download File | Complete Tutorial
Просмотров 9 тыс.2 года назад
Angular Web API Download File | Complete Tutorial
Angular File Download From API | Download File Using Angular
Просмотров 48 тыс.2 года назад
Angular File Download From API | Download File Using Angular

Комментарии

  • @abhishekjadhav9289
    @abhishekjadhav9289 8 дней назад

    Thank you for the video playlist. But your explanation is very small and fast. Can you explain slowly and in elaborative manner ? I am new to this topic its very hard to understand in the video.

    • @azureteachnet
      @azureteachnet 7 дней назад

      Thanks for the feedback. I will do it in the future videos. This video was created after many other videos which have explanations. So I thought telling the same point again and again will be redundant and waste viewers time. However, I will try to fix it. Thanks

  • @ericcheung8790
    @ericcheung8790 16 дней назад

    Thanks your video. I question question: It seemed if the web site being publish, the running webjobs will be stopped. Do you have this case?

  • @pramodahire8400
    @pramodahire8400 20 дней назад

    Can you provide github url for azure ad auth using msal and graph api

  • @emanuelsanchez7464
    @emanuelsanchez7464 27 дней назад

    Now that Microsoft.IdentityModel.Client.ActiveDirectory package is depreciated, is there an update?

  • @imxeek6157
    @imxeek6157 28 дней назад

    If i use a b2c to get the bearer token, if i use the list blobs with the token i got from my b2c will i get only the blobs that i get acces to? or i will get everyblob

  • @mr_don_key
    @mr_don_key Месяц назад

    oooh boy, this is sooooo not secure... NEVER EVER use a client secret in a user facing application (running on the computer of the user). NEVER. also with oauth and entra-id, you don't have to, since there are authentication flows to choose, especially made for clients (like, desktop/console apps, or mobile apps), these flows proof you have no need for the secret at all.

    • @azureteachnet
      @azureteachnet Месяц назад

      Focus of this video is to demo Azure AD authentication. in WebAPI. Yes. Secrets should not be added on the app settings and for that we need to use keyvault or azure app configuration. I make videos part by part. There is a separate 1 hour video for keyvault in the channel. Thanks.

  • @borekoduthundi2010
    @borekoduthundi2010 Месяц назад

    You are doing a great job❤.

  • @Abhishek-yy3xg
    @Abhishek-yy3xg 2 месяца назад

    I have done the same work around 1 but still getting cors error

  • @Abhishek-yy3xg
    @Abhishek-yy3xg 2 месяца назад

    I am getting this error: The request doesn't contain a client_id parameter when clicking authorize button? PLease help to resolve the same. However, I am following the same code as yours/

  • @MsYogeshPandey
    @MsYogeshPandey 2 месяца назад

    Best channel for quick and to the point learning. Great, hats off to you.

    • @azureteachnet
      @azureteachnet 2 месяца назад

      Thanks a lot for the feedback. These kind of comments motivates me a lot to make good stuff. Please subscribe to the channel if you have not subscribed yet. Thanks.

    • @MsYogeshPandey
      @MsYogeshPandey 2 месяца назад

      @@azureteachnet Already done and pressed the bell icon as well :)

  • @Abhishek-yy3xg
    @Abhishek-yy3xg 2 месяца назад

    How to authenticate the generated bearer token without opening the login window after clicking authorize.

  • @tesabcfgh
    @tesabcfgh 2 месяца назад

    👏 👏 👏 👏 👏

  • @chetankumar1208
    @chetankumar1208 3 месяца назад

    I have generated the token but when I am hitting send request. My API not showing any result and it only showing 401 error.

    • @azureteachnet
      @azureteachnet 3 месяца назад

      Please decode the token in jwt.io or jwt.ms and check audience. It should be ap;i://<<your app id>>

    • @chetankumar1208
      @chetankumar1208 3 месяца назад

      Thanks but I think I was some other issue I have sending same api link in Tenant 1 and Tenant 2 in appsetting.json when I have run for single Tenant it is working.

    • @chetankumar1208
      @chetankumar1208 3 месяца назад

      ​@@azureteachnetI want to ask that in my Tenant app-2 the endpoint link is same as the Tenant-1 Endpoint link . Is it okay ?? Or it is an error ??

    • @azureteachnet
      @azureteachnet 3 месяца назад

      @@chetankumar1208 In the configuration files of client app, you have to make sure to configure the respective clients.

  • @marcoalayn3633
    @marcoalayn3633 3 месяца назад

    God Bless you, good man! 🧐👌

    • @azureteachnet
      @azureteachnet 3 месяца назад

      Thanks for feedback. please subscribe to the channel if you have not subscribed yet. The channel have a lot of realtime videos on azure. Thanks

  • @pcmaniakkk
    @pcmaniakkk 3 месяца назад

    Why did you checked "implicit flow" and "hybrid flow"??? While you are implement pkce implemention for authorisation code flow, you shouldn't check these checkbox. Also it is mentioned above of the that options.

    • @azureteachnet
      @azureteachnet 3 месяца назад

      Good catch. I usually check that implicit flow just to make my life easier while making the video. As I used to it, Un Intentionally checked that.

  • @forsalemailid6305
    @forsalemailid6305 3 месяца назад

    Not changing the "Private" access to the container, Is there no other way to open the URL from the browser?

  • @Muhil_kannan_
    @Muhil_kannan_ 3 месяца назад

    Hey could you please share some idea to fetch the details of currently logged in user alone? Eg. If i login to that application i want my details alone. I don't want to get entire users info

    • @azureteachnet
      @azureteachnet 3 месяца назад

      What do you want to get? If you need email you can get it from the token itself.

    • @Muhil_kannan_
      @Muhil_kannan_ 3 месяца назад

      ​@@azureteachnet i want to fetch displayname surname givename mail and company name

    • @azureteachnet
      @azureteachnet 3 месяца назад

      @@Muhil_kannan_ you can call graph api. It exposes multiple endpoints. /me endpoint gives you what you are looking for

    • @Muhil_kannan_
      @Muhil_kannan_ 3 месяца назад

      @@azureteachnet thanks man !!

  • @shrinivaschakravarthy
    @shrinivaschakravarthy 3 месяца назад

    Very nice and helpful article brother. Please create a video and explain the logic as you said at the end of the video. Also, can you make a video on enabling multiple authentication schemes like JWT and API key-based authentication/authorization on a .Net Web API application??

    • @azureteachnet
      @azureteachnet 3 месяца назад

      Thanks a lot for the feedback. Sure. I will.

  • @Vinothm24
    @Vinothm24 4 месяца назад

    Great video sir

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.

  • @nageshajab1
    @nageshajab1 4 месяца назад

    nice video, thanks

  • @cihlen
    @cihlen 4 месяца назад

    Thank you for the video, it was very helpful since I also got the CORS error and it helped me find a workaround.

  • @rahulbisen1174
    @rahulbisen1174 4 месяца назад

    Hi, All of your videos are really helpful, and the way you explain things is amazing. I have one question: I have a web API application with a few APIs that I need to share with another team and a few APIs that I want to integrate into my app. Could you please tell me which of your videos would be helpful for this? I can't figure out which one to watch.

  • @manok8308
    @manok8308 4 месяца назад

    I can say it's very helpful tutorial, it clear lots of doubts and give a lot of insights. Thanks, and keep doing the good work. However, I am wondering the below things, I am requesting you to please explain? so that others who may have the same doubts can also refer the same. 1. I am not seeing any refresh token concepts in both Angular and Web API or I don't see any call made to get refresh token in both apps. 2. What happens if the token gets expired? how and where to maintain this logic. 3. I don't see you append any access token in the header while making the http call ? how come we pass both access and refresh token ?

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Thanks for the feedback. Right now I dont have any videos which shows angualr refresh token with Azure AD. will make video soon.

  • @sanjaypardeshi8914
    @sanjaypardeshi8914 4 месяца назад

    Can we get the user details like subscription name , plan name, subscription state, Tenant ID using GraphAPI? Once the user login through Azure AD I want to show this information on landing page.

    • @azureteachnet
      @azureteachnet 4 месяца назад

      You can get the things which are listed in the below url. This is Graph Api explorer created by Microsoft. I dont think it is possible to get the details that you mentioned with Graph API. Microsoft provides other tons of apis. You can search for Microsoft Component API or other Azure Apis. Basically Subscription Id serves as an identification. developer.microsoft.com/en-us/graph/graph-explorer

  • @fausioluis9789
    @fausioluis9789 4 месяца назад

    helpful Thanks, is possible to get the current user email ?

    • @azureteachnet
      @azureteachnet 4 месяца назад

      It is possible. You can get it from the token claims. I guess the git repo have the details.

    • @fausioluis9789
      @fausioluis9789 3 месяца назад

      @@azureteachnet thanks

  • @guilhermefaria1285
    @guilhermefaria1285 4 месяца назад

    Great explanation. Which users will have a successful login when trying to acquire the token? All users from your directory, or is a specific permission required?

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Right now, any one who can log on to the directory can access this. If you need any restrication as such, you can use role claims on API. you can do it in other ways too.

  • @VikasSingh-ve4fp
    @VikasSingh-ve4fp 4 месяца назад

    Simply best

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Thanks a lot for the feedback. Please subscribe to the channel if you have not subscribed yet.

  • @priyankjoshi6869
    @priyankjoshi6869 4 месяца назад

    Do we need a separate Azure ad app registration for web API We already have an app registration for angular app? Can we use the same client ID and tenant ID for web api as we are using for angular UI?

  • @ivanraineri6831
    @ivanraineri6831 4 месяца назад

    thx!

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.

  • @bandasanthosh
    @bandasanthosh 4 месяца назад

    How do we get logged in user email using this method

    • @azureteachnet
      @azureteachnet 4 месяца назад

      you can decode the token. It will have the email in claims.

    • @bandasanthosh
      @bandasanthosh 3 месяца назад

      @@azureteachnet do you have any video on how to decode them or any other resource where I can refer to?

    • @azureteachnet
      @azureteachnet 3 месяца назад

      @@bandasanthosh do you mean the token? Token can be decoded using Base64. You can use http client to forward the token. There are many other ways present to achive that.

    • @bandasanthosh
      @bandasanthosh 3 месяца назад

      @@azureteachnet Sorry for asking multiple times.. do you have some reference guide for end to end process?

    • @azureteachnet
      @azureteachnet 3 месяца назад

      @@bandasanthosh still I did not understand what you are looking for. can you please elaborate your requirement? If you are looking for authentication and authorization, the channel have a playlist which has at least 10 videos. If you want to pass token from one api to other here is the video. ruclips.net/video/jv_vi1G6eGA/видео.html if you use the same audience for both APIs, you can simply pass the token as is. To get the token in your API, you can Enable Token Aquisation or write your own middleware to get the token and pass it.

  • @gauravphone2962
    @gauravphone2962 4 месяца назад

    Thank you so much for making this video ❤❤❤ It really helped me a lot to understand the azure API authentication 🥳🥳 God Bless You 🙏

    • @azureteachnet
      @azureteachnet 4 месяца назад

      Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.

  • @manikantareddy2385
    @manikantareddy2385 5 месяцев назад

    Hi, how to redirect /login-failed route if login is not failed.

  • @richardwaldron1684
    @richardwaldron1684 5 месяцев назад

    Brilliant demo!. I'm studying for my AZ-104 and have never used App Services at all so it's all new to me. The clarity and detail of your video that starts rights from the beginning of the process including what problem deployment slots are meant solve was really helpful. Thanks for sharing

  • @danilomiranda1871
    @danilomiranda1871 5 месяцев назад

    hi!, you have created 2 app in the register apps azure, this is for development environment, but for qa or production, i will have create other applications in azure?

  • @shrinivaschakravarthy
    @shrinivaschakravarthy 5 месяцев назад

    I see that the scope created was only for one API controller. Can't we make it work without a scope or by using the .default scope?? I think the role(s) was alone enough with default scope. Can you explain please?

  • @amanraut5304
    @amanraut5304 6 месяцев назад

    Please make a video on federated crentaial in azure

  • @NileshBhosale-w1b
    @NileshBhosale-w1b 6 месяцев назад

    Hello, I have tried but at time of generating the token giving error as HTTP Error 400. The request hostname is invalid, can you please comment if there is any revision take place?

  • @mickduster
    @mickduster 6 месяцев назад

    Great resource. Thank you.

  • @madeinchiapas
    @madeinchiapas 6 месяцев назад

    thanks!

  • @anurag0304
    @anurag0304 6 месяцев назад

    github link ?

    • @azureteachnet
      @azureteachnet 6 месяцев назад

      github.com/AzureTeachNet/AzureTeachTutorials/tree/Angular_WebAPI_AzureAD_Authentication_Authorization

    • @anurag0304
      @anurag0304 6 месяцев назад

      Thanks man , I really appreciate your good work

  • @viveksingh-pv3cf
    @viveksingh-pv3cf 6 месяцев назад

    How to get all user list Display Name in Azure active directory.

    • @azureteachnet
      @azureteachnet 6 месяцев назад

      Please mention displayName in select list while calling graph api

  • @hasithagunathilaka1821
    @hasithagunathilaka1821 7 месяцев назад

    Thanks for the video, very helpful

  • @prashanthrapalli
    @prashanthrapalli 7 месяцев назад

    this is not working

    • @prashanthrapalli
      @prashanthrapalli 7 месяцев назад

      Auth error Error: Bad Request, error: invalid_grant, description: AADSTS501481: The Code_Verifier does not match the code_challenge supplied in the authorization request. Trace ID: ********* Correlation ID: ******** Timestamp: 2024-05-07 03:55:22Z

    • @prashanthrapalli
      @prashanthrapalli 7 месяцев назад

      Auth error Error: Bad Request, error: invalid_grant, description: AADSTS501481: The Code_Verifier does not match the code_challenge supplied in the authorization request. Trace ID: ******** Correlation ID: ********* Timestamp: 2024-05-07 03:55:22Z

  • @neerajsharma7330
    @neerajsharma7330 7 месяцев назад

    I can able to read the csv in postman but not in CloudShell in Google

  • @neerajsharma7330
    @neerajsharma7330 7 месяцев назад

    Can you please add the curl command instead of postman to GET file from azure blob storage

  • @AlokKumar-nz8en
    @AlokKumar-nz8en 7 месяцев назад

    Bro, i was following this tutorial and i have to display userEmail in header component. And when i called ,getProfile() inside ngOnInit of header.comp.ts. then i am getting issue of automatically login. Because ngoninit is a lifecycle and i am calling inside it. Can you help to resolve that issue.

  • @adeshpadwal8457
    @adeshpadwal8457 7 месяцев назад

    Awesome explanation, am getting the below error: AADSTS9002326: Cross-origin token redemption is permitted only for the 'Single-Page Application' client-type.

  • @harshithaveeramalla2592
    @harshithaveeramalla2592 7 месяцев назад

    Iam looking for the same configuration with .NET Framework application.

    • @azureteachnet
      @azureteachnet 7 месяцев назад

      Did you try using Jwt Bearer? you can use WebClient in .net framework. You may have to write an authentication/authorization filter.

  • @zeusmortegh7538
    @zeusmortegh7538 7 месяцев назад

    Is this useful for a real in production scenario? on what kind of architecture it could be applied? Thanks for your content, it is very informative and useful

    • @azureteachnet
      @azureteachnet 7 месяцев назад

      Yes it is useful. In this video, I have shown manual steps to add the dlls. Visual Studio connected services has scaffolding option to add authentication where you need not write code at all. It will be generated. VIdeo for the the same available on the channel. Thanks.

  • @vinodvaravath139
    @vinodvaravath139 7 месяцев назад

    What if the client secret compromise how to apply more security

    • @azureteachnet
      @azureteachnet 7 месяцев назад

      You can use keyvault and keep your secret in it. If it is compromized, you can generate a new one. You can use certificates in a combination with appid and secrets so you can make sure that only the valid clients who have the certificate can access your application. You can block all other ips except the white listed ip addresses. It all depends on how critical your applicaiton is.