Authentication and Authorization [4 of 8] | .NET on Azure for Beginners

Welcome to the .NET on Azure for Beginner series where you will learn the basics of getting your .NET applications up and running in Azure! This series will cover a lot - from resource group naming conventions to Managed Identity, to deploying your apps to Azure via GitHub Actions!

In this episode Matt is going to add some authentication and authorization to the app by breaking it into two. We'll have a frontend that will communicate with the backend with certain operations in the backend needing auth to complete. And that auth will be provided by Azure AD B2C.

Chapters:
00:00 - Intro
01:50 - Provision an Azure AD B2C tenant
04:28 - Creating Azure AD B2C user flows
06:58 - App registrations in AD B2C
08:35 - Explaining the new app architecture
14:30 - Running and testing a user flow
17:30 - Hooking up Azure AD B2C to the application
24:10 - Creating the Web API's B2C registration
29:26 - Putting the web api and app together with B2C

Follow Matt:

Links:

#dotnet #azure #azureforbeginners

[XaviCasals]

Thank you for this excelent video. But B2C deserves a full series where we can see not only the simple scenario, but also how to add external providers, how to skip b2c while in dev environment, how to add claims based on our backend business rules (like adding our tenant id as a claim in a multitenant SaaS) or how to safely move users from the classic Identity model. That would be very very useful. Thank you again.

[ZeroPageX]

Knowing when to copy new code would be helpful. I couldn't find the callbackPath in either appsettings.json file. I wasn't sure what was going on as you never mention when we should be copying new versions of code over. I finally did a "Find in Files" realizing I needed new code. That is also a problem as the configuration values are different from what you're telling us to enter, so we have to change these values every single time we copy new code over.

[PavanSibal]

Your tutorials are awesome. You should do more building some event based architected applications .

[b]

so how did you get the verification email???

[valentinoromelio]

Thanks for your session. Its clear and relaxed. I have a question. Without doing any code you showed how to go through the sign up flow and retrieve a bearer token. Can you also demonstrate how to use this same bearer token to access the microsoft store api without any c# code? 😊

[ZeroPageX]

Can't seem to post a new review after adding authorization. It doesn't show in the list, and there are no error messages. Yes, I've clicked refresh reviews, and I have checked the database table directly.

[RouteDeTours]

Surely there MUST be an easier way. Heaven help me if this is actually what you have to go through. Time to ask Google if there is a simpler way of asking a user to login.

[youdube]

Someone on twitter said. Blazor is going no where😢

[rankarat]

This is a terrible experience. So many things to connect with no direct flow, wow, how they have the nerve to put it out on public.

My friends this is not needed, just use jwt with claims inside it.