SEC000: Securing Blazor & Web APIs with AAD

In this session, I'm going to show you how to secure your Blazor application and a Web API using Azure Active Directory!
Check it out here today!

[@Yorkela]

Nice! Straight to the point, I’ve been reading that folks are confused about these very topics.

[@JunaidBedford]

You will not understand how grateful I am for this series! Awesomeness :)

[@AskFiqri]

Finally ! An Eid gift for me. Thank you

[@fieryscorpion]

Great video! Patiently waiting for more! 😃
Thank you!

[@dlandi]

Great! Looking forward to next video in this series.

[@bryce6290]

Two thumbs up Hassan. Loved it. -Bryce

[@gavinwilliams2311]

Really good tutorial! Very concise and to the point. Absolutely subscribing!

[@ndanh1]

I really appreciate your work. This helps me a lot catching up main flows of Azure AD.

[@musicflower-relaxingandcal2679]

Great explanation as always, and very inspiry. Thank you Hassan for your help and guide.

[@YaSiRaRaFaTdoTNet]

great introduction and keeping the warning (29:25) in mind, but will give it a try definitely! 🙏 💚

[@alexgoeckner5147]

Thanks Hassan, I've been looking for something like this. Your the best!

[@shahnawazk]

Great demo on AAD, thanks Hassan.

[@anthonyliljegren1664]

Super helpfull! been playing around with it a bit before finding this video, and it really helped me make the integration simpler.

[@ecwb]

Fantastic information, many thanks that has really helped me out!

[@ej2649]

Great video! Thank you for sharing.

[@sssshooter]

thanks Hassan it was very interesting and just on point for my project

[@alexclark6777]

This is brilliant. Would you be able to show an example of hitting the API directly with Postman, and doing the necessary authentication steps first to get the token?

[@HassanHabib]

Sure thing. stay tuned for the upcoming videos within this series

[@ujuzitek301]

This was very helpful. I enjoy your approach. I would like to see a video of managing putting the claims to use in terms of roles both at the blazor and api layers. Hopefully you can use Azure Functions this time.

[@antondoit]

Hassan is so great in describing.

[@davidbrenchley]

Could you show how to do this with ADB2C?

[@fadidib8516]

Awesome video 😁

[@danmoyer8191]

Nice demo. We have an application where different parts of the application can be accessed using specific roles. For example a nav link to a admin page appears only when a user has admin role. A instructor page appears if a user is a instructor, but cannot be seen if user is a student. Can you discuss how one could configure authorization roles and apply them in the app and api?
Currently we do authentication with AAD to get user identity and use a backend database containing users and roles the user is in. Then add claims to claim collection for the authenticated user. Authorize and AuthorView tags with specified roles restrict the UI elements the user can access. I suspect there is a easier way.

[@apoorvahs1989]

Thank you so much for this video. It was very good. I have a question if we deploy this app and api in different azure web service , do we need to add any other configuration ?

[@chrislangston929]

great video! I'm interested in the next video showing hitting another down-stream protected API from the initial protected API. Any idea when you'll have time to create that one?

[@jacksorjacksor]

Hi! Thank you so much for this! How different would the process be using Blazor WebAssembly (WASM) instead of Blazor Server? TIA!

[@alexanderflanchik5227]

Really cool! Thank you!

[@MrFoghorn111]

Really enjoyed this video. I'm curious about mixing technologies here. To that end, I'm pretty sure that the MVC solution (in place of blazor) is largely a drop in replacement, but what about using the javaScript fetch API to connect to the Application API? Seems like avoiding postback screen refreshes would be a nice segue from here.

[@yourockst0ne]

I saw the post on Reddit :)

[@HassanHabib]

I preach everywhere XD

[@awaisshabir9169]

Interesting video !

[@d3vil5oldier]

This is very good!

[@jorgesurillo]

if this video was with standalone wasm instead, it would be perfection!

[@dajma00]

Ok, so now can my Blazor server app have my own Login component that I can style myself? How would I do that?

[@manivenkiteswaran2952]

This is fine for a project being built from scratch. How about incorporating the same for a existing project?

[@shatvani]

In an enterprise is it a requirment to login users automatically with SSO. Can you show how I can set up SSO in an Azure AD + Blazor WASM and Web API enviroment, please.? I do not find any comprehensive tutorial about it.

[@lab0730]

We are in the same boat, looking everywhere for an example with BLAZOR WASM. @Hassan Please make an example using Blazor WASM with a Web API.

[@shatvani]

@@lab0730 Hi, if you find something let me know, please.

[@ajazahmad2386]

Excellence MR. HASSAN HABIB REALLY HABIBI

[@TheSecondPowerSecond]

I LOVE U

[@cacowen]

Good info :) Maybe soon a follow up video can be how to integrate an Auth Source for "open" blazor applications. Where users "off the street" can create an account and access their info.

[@HassanHabib]

Coming very soon!

[@thedebasispaul]

👍

[@ershadnozari]

Found it! 😉

[@alexgoeckner5147]

Will this work with blazor wasm?

[@talo11]

I have de same question.

[@smatthews1999]

Why would you use Blazor Server for this? No one uses Server. Please make the same video using WASM.