Protect your APIs in API Management with Azure AD

A link to my full APIM course on Udemy

[dinarabe]

eagerly anticipating the introduction of the new topics, thank you!

[IcedCupcakes]

for service to service calls, wouldn't u use app roles instead of creating scopes in expose an api?

[juancarlosarceguerra]

Hello Hussein, I am not using the developer portal, how can I get the token from the client-app with "aud" of the backend? I am trying to get the token with insomnia, but it always comes with the aud equal to its application (client) id of the client-app and the JWT policy does not allow it as it expects the {backend-app-client-id} in the claim. Please help if you have any ideas. Thanks

[branica]

Why do you have to publish the portal each time you do a change to an API?

[wearewhoweare]

Hi Awad, can you do that with the combination of Azure AD B2C and application gateway with APIM? 😢😢😢😢

[Srisribaburao]

Will there be expiry for JWT token? How can I generate or refresh the JWT token programmatically?

[mediocre.climber]

Wait, what stops me from calling the backend function directly?

[mahmoudelsonbati]

How to request a token from front end app?