I’ve used Azure Active Directory (AAD) authentication and authorization in a variety of Web Apps for logins, calling external APIs (e.g. Graph API) and authorizing site area access and while authentication is reasonably simple to get working authorization has always been a bit more confusing. This is fair enough as Read more…
IdentityServer4 is an OpenID Connect and OAuth 2.0 framework for ASP.NET Core which acts as a middleware layer for managing authentication and authorization. Configuration data for the IdentityServer4 service can be persisted in a variety of storage mediums including Microsoft SQL Server, MySQL and PostgreSQL and if you want to Read more…
There are various ways of authenticating against Azure Functions but the default method is by providing a code value as a URL parameter in the call to the endpoint. If you’re using RestSharp to call your function there’s no specific authenticator to manage handling this parameter but it is pretty Read more…
I usually access Azure Blob Storage by using a SAS key but I am trying to move everything over to KeyVault and Managed Service Identities (MSI) to improve security and secret management. During this process I kept on receiving the following error. I could connect to the container using my Read more…
IdentityServer4 is an OpenID Connect and OAuth 2.0 framework for ASP.NET Core 2 which can be used to manage authentication for web applications. In my case I wanted to set up OAuth 2.0 authentication using a SQL backend for an API, this isn’t too tricky when you know what you’re Read more…
I’ve been getting to grips with Azure AD authentication an part of that has involved retrieving access codes for Power BI at initial login to an authenticated web application. When I finally managed to get this working I then started getting the following error. Bad Request – Request Too Long Read more…
Retrieving OAUTH2 Tokens in .NET To get access tokens from an OAUTH2 identity server you can make a standard POST request using HttpClient, the easiest way of sending the required credentials is by serializing a dictionary object of values into URL encoded content. Token Class public class Token { public Read more…
Azure Active Directory Authentication in Web Applications I’ve previously used “Individual User Accounts” authentication for authenticating users in web applications but as the management of users in the underlying SQL databases isn’t that simple it seemed that using Azure Active Directory to manage users might be a better option. The Read more…
How to get access tokens from Azure Active Directory I’ve recently been working on a project to display Azure billing information in an internal dashboard and to send out alerts if the billing exceeds a certain amount. The first problem I had with this was that although there’s GitHub projects Read more…