Protecting Web APIs Using Microsoft Identity Platform: Part 2

The following posts are part of this series: Part 1: Creating your App Registration Part 2: Configuring your code Part 3: Securing your API endpoints Defining protected First of all, let's look at what we mean by protected. Much like in ASP.NET, in ASP.NET Core, you can use the [Authorize] attribute to define that your … Continue reading Protecting Web APIs Using Microsoft Identity Platform: Part 2

Protecting Web APIs Using Microsoft Identity Platform: Part 1

The following posts are part of this series: Part 1: Creating your App Registration Part 2: Configuring your code Part 3: Securing your API endpoints Let's begin I'm not going to cover the steps involved in creating an app registration. This is covered, in detail, in the Microsoft documentation. In this article though, I want … Continue reading Protecting Web APIs Using Microsoft Identity Platform: Part 1

Call the Azure REST API using Microsoft Identity Web

The Microsoft Identity Platform provides developers with the opportunity to make use of v2.0 endpoints to develop their applications. In .NET Core this is the Microsoft.Identity.Web package.This library is specifically written for applications fulfilling either of the two scenarios below:Web applications which sign in users and call web APIsProtected web APIs which call downstream web … Continue reading Call the Azure REST API using Microsoft Identity Web

Effective App Roles in Multi-Tenant Applications

As I begin work on the cloud management platform at Transparity, I've been very clear that wherever possible, we need to make use of built-in features in the .NET Core framework as well as the Azure platform.Identity is one of the areas where this falls firmly into line, and you actually have a number of … Continue reading Effective App Roles in Multi-Tenant Applications