Web API Security With Azure Active Directory

on YouTube ↗53m

" summary

Builds an end-to-end Angular front end and .NET 5 Web API protected by Azure Active Directory, using Azure CLI scripts to create app registrations, service principals and scopes, and demonstrating the authorization code flow with PKCE for single-page apps. Shows exact app id vs object id pitfalls, uses Microsoft Identity libraries in Angular and ASP.NET Core, automates redirects with Graph via az rest, and proves the demo works: login, consent and API calls succeed. infrastructure as code Microsoft Identity Platform

AI-written summary · about

" chapters (8)

1. 0:00Introduction and speakers
2. 1:10OpenID Connect and OAuth recap
3. 14:35Azure AD app registration types
4. 21:14Infrastructure as code demo setup
5. 31:04Registering client and API apps
6. 42:51Angular integration with MSAL
7. 48:09ASP.NET Core API protection
8. 50:40Summary and next steps

" related talks

• 01h 02mDemystifying Web API Security in AzureJimmy Bogard · NDC Sydney 2024
• 50mSecuring a REST API with Azure Active DirectoryRick v.d. Bosch · Future Tech 2019
• 52mDemystifying Web API Security in AzureJimmy Bogard · DevConf 2023
• 30mEnable Authentication and Authorization with Azure Active DirectoryYawei Wang · SpringOne Platform 2017
• 01h 05mBuilding Secure Microservices in AzureJimmy Bogard · NDC London 2023
• 55mReal World Guide to Web API authentication on AzureHeather Downing · NDC Copenhagen 2019
• 50mSecuring .NET Apps and Microservices in AzureVictoria Almazova · .NET fwdays'20 online conference
• 01h 03mBuilding Secure Microservices in AzureJimmy Bogard · NDC Oslo 2022