search

reboottime / Azure-Journey

This repository tracks my azure platform journey systematically.
0 stars 0 forks source link

Build Web Application using Azure Platform #8

Open reboottime opened 10 months ago

reboottime commented 10 months ago

Overview

This article discusses the process of building a web application using the Azure platform. The content covered includes:

Authentication Using Azure Directory

Microsoft issues access tokens in the JSON Web Token (JWT) format.

How to Protect APIs Using the Microsoft Identity Platform

In Azure Directory, everything is treated as an application, including your API service and background processes using PowerShell.

Protecting an API with Azure AD

Lecture

  1. Register the API as an app in Azure AD.
  2. Define the delegated permissions that your API exposes in the App Registration portal.
    • Help developers using your API adhere to the principle of least privilege.
    • Avoid granting overly broad "do-everything" permissions whenever possible.
    • Be cautious and conservative when allowing permissions that users can consent to.
  3. Validate received access tokens in your API.
    • Utilize existing libraries and middleware, as they are available for most platforms.
  4. Apply and enforce permissions.
    • Delegated permissions should not exceed what the signed-in user is allowed to do.

UI

References