I’m currently in the process of setting up a home k3s cluster. As part of that I want to use Keycloak as an OIDC provider for managing authorization and authentication in a couple of apps that I’m hosting. Because I’m hosting the cluster at home and my ISP users a Read more…
Since I wrote the post Azure Active Directory Authentication for React I discovered that the library used (react-aad-msal) is being depreciated as Microsoft are now providing their own offical library (@azure/msal-react) for these purposes. There’s good documentation of the msal-react library available on the package page as well as samples Read more…
Usually when I build a website it’s an ASP.NET Core Razor site created from Visual Studio but I’ve recently started to try to get to grips with the React framework (again within Visual Studio). This means I’m having to relearn a few of the things that I’d previously taken for Read more…
I’ve been needing to access the AWS S3 API recently as part of a project and although there’s a pretty good client already available it didn’t quite meet my needs so I decided I needed to build my own client based on RestSharp. Unfortunatly although the API is pretty simple Read more…
I’ve used Azure Active Directory (AAD) authentication and authorization in a variety of Web Apps for logins, calling external APIs (e.g. Graph API) and authorizing site area access and while authentication is reasonably simple to get working authorization has always been a bit more confusing. This is fair enough as Read more…
IdentityServer4 is an OpenID Connect and OAuth 2.0 framework for ASP.NET Core which acts as a middleware layer for managing authentication and authorization. Configuration data for the IdentityServer4 service can be persisted in a variety of storage mediums including Microsoft SQL Server, MySQL and PostgreSQL and if you want to Read more…
There are various ways of authenticating against Azure Functions but the default method is by providing a code value as a URL parameter in the call to the endpoint. If you’re using RestSharp to call your function there’s no specific authenticator to manage handling this parameter but it is pretty Read more…
I usually access Azure Blob Storage by using a SAS key but I am trying to move everything over to KeyVault and Managed Service Identities (MSI) to improve security and secret management. During this process I kept on receiving the following error. I could connect to the container using my Read more…
IdentityServer4 is an OpenID Connect and OAuth 2.0 framework for ASP.NET Core 2 which can be used to manage authentication for web applications. In my case I wanted to set up OAuth 2.0 authentication using a SQL backend for an API, this isn’t too tricky when you know what you’re Read more…
To get access tokens from an OAUTH2 identity server you can make a standard POST request using HttpClient, the easiest way of sending the required credentials is by serializing a dictionary object of values into URL encoded content. appsettings.json