Real World Guide to Web API authentication on Azure

on YouTube ↗41m

" summary

Creates a .NET Web API, pushes it to a new GitHub repo, and deploys to Azure App Service using Kudu continuous deployment so pushes auto-redeploy; secures endpoints with OAuth 2 client credentials issued by octa and validates JWTs via OpenID Connect and JWT Bearer middleware; stores auth authority and audience in Azure App Settings instead of code; Postman requests return 401 unauthenticated then 200 after obtaining a token, proving the flow works.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 2:07Objectives
3. 6:17Create a repo
4. 10:53Create a Web API project
5. 26:22Set up the REST API
6. 29:52Add Azure App Service
7. 37:12Postman Setup

" related talks

• 55mReal World Guide to Web API authentication on AzureHeather Downing · NDC Copenhagen 2019
• 01h 02mDemystifying Web API Security in AzureJimmy Bogard · NDC Sydney 2024
• 52mDemystifying Web API Security in AzureJimmy Bogard · DevConf 2023
• 53mWeb API Security With Azure Active DirectoryRainer Stropek, Simon Opelt · Global Azure Austria 2021
• 58mLet's talk AuthJordan Knight · NDC Sydney 2016
• 50mSecuring a REST API with Azure Active DirectoryRick v.d. Bosch · Future Tech 2019
• 41mEasy-Auth: The Easiest Way to Secure Your Application in Azure App ServiceMassimo Bonanni · DevDays Europe 2024
• 50mSecuring .NET Apps and Microservices in AzureVictoria Almazova · .NET fwdays'20 online conference