swagger azure ad authentication | web api azure ad authentication | Swagger Azure AD Login

swagger azure ad authentication | web api azure ad authentication | Swagger Azure AD Login | .Net6 Web API Azure AD Authentication
How to integrate Swagger with Azure Active directory(Azure AD) - This swagger azure ad video has the answer. Swagger uses open api specification and we can use it to integrate with any authentication provider like azure ad. For Swagger azure ad login first the application have to be integrated with azure ad authentication to implement swagger azure ad login.

I have used Connected services feature of Visual studio to integrate Web API with Azure AD. It generates Web API Azure AD code, adds required nuget packages, creates azure app registration and configures app settings with swagger azure ad configuration also it creates a default scope access_as_user.

Swagger Azure AD Login requires writing code for AddSecurityDescription, AddSecurityRequirement. AddSecurityDefinition will have content that will be displayed on the Swagger UI. It need .Net6 Web API description, Scopes and also authentication type, Swagger Azure AD Authorization Url, here in this Swagger Azure AD authentication, it is oAuth2.0 and this Swagger Azure AD Login example uses AuthorizationCodeFlow. There are other types of code flows like Password, Implicit, Client Credentials.

Swagger Azure AD Authentication AddSecurityRequirement needed to specify the type of authentication needed, Also it need scopes to be passed.
One last configuration that is needed is to configure the client id.

You need to add the swagger azure ad app registration as a client application by going to api's app registration and expose api, add client application. This will ensure that swagger azure active driectory authentication's app registration have access to the api that we have developed.

Once you run swagger azure ad authentication api solution, it will open the swagger UI. you will see an authorize button on the screen. It will open swagger authenticaiton popup, you need to select the scopes. Once you click on swagger authorize button, it will redirect you to azure ad login page. Once you login, it will return the token to Swagger azure ad app which can be used to access the api.

00:00 Swagger Azure Ad Authentication Intro
00:30 Configure Azure AD to Swagger Azure AD App
04:42 Swagger Azure AD login code
10:49 Swagger Azure AD Client App registration
15:40 Swagger Azure AD Authentication app Testing

#SwaggerAzureAD
#WebAPIAzureAD
#SwaggerWebAPIAzureAD

Buy Me A Coffee :

GitHub:

[TellaTrix]

Wow ! It has lot of configuration. Really informative content.

[shivamacharya]

Perfact explanation. Most awaited video.

[juliopinedajung]

Thanks for your video.
Since I have access to swagger securely:

Is it possible in Swagger to create an End-Point to get the Azure token?
And then, using this Token, access the App from another App without having to register the second App?

Otherwise. How could I access this API without having to register my APP with Azure? Maybe using Swagger to get the Token? Is this possible?

[ionix]

Your explained very well. Thank you very much! I appreciate it.

[guilhermefaria]

Great explanation. Which users will have a successful login when trying to acquire the token? All users from your directory, or is a specific permission required?

[shatvani]

I thank you for sharing your knowledge. By the way, is is neccessary to register a new SwaggerClientAppRegistration registration for Swagger in Azure AD? Cannot it be possible somehow to create a Swagger client in the SwaggerAzureADApi registration, please?

[viksdeeps]

Can you direct me, how can I do the same in web api .Net Core 6. Both client call and API call will be in same. Long story shot I need Id Token with user roles, without pop-up. Like get the token silent. Your help is much appreciated.

[shatvani]

Unfortunatelly when I open the Swagger API in Chrome or Edge after I click on Authorize button nothing happens but in the Firefox authorization works but when I want to try out the WeatherForcast endpont it gives me this error: 'The user or administrator has not consented to use the application with ID ... named API. Send an interactive authorization request for this user and resource.' Could you tell me what is the problem, here, please?

[volkerkleffmann]

Thank you very much for your video! Really well explained!

[Abhishek-yyxg]

How to authenticate the generated bearer token without opening the login window after clicking authorize.

[acncernedcitizen]

16:35 this is fine for testing in Swagger, but do you have a video showing how to authenticate a request m2m without any user to manually authenticate?

[walkingdadjokes]

thx for the details. Why must swagger have it's own app registration though? Swagger is within the API app no?

[onurakmese]

Hi I have a question please, why do we need 2 applications ? It's working with one

[Kokolino_]

If I create an Azure Entra ID service to generate a bearer token, with a client_id and client_secret. Can I integrate this in the swagger? Because in your approach you are not using the client secret. I need to use the client secret because I'm building a swagger for a client with oauth2 authentication endpoints, and the idea is to generate the bearer token with a client_id client_secret and the scope. Thanks in advance

[dancristian]

just in case... there`s no more uploaded sample project in github you shared here.

[aavuong]

Thank you for the video. Can you configure swagger to call controller that configure with [Authorize(Roles = "Api.ReadWrite")]? Thank you in advance

[dancristian]

can we create an andpoint "login" to get the token and put it in authorize botton to gain access? any link to share? thanks man!

[M_Oussama]

Thanks I like it but project not exist in GitHub link and how we can have a logout end point ?

[drouxn]

Do you have something similar on swagger azure ad b2c authentication? I tried to apply this on Azure AD b2c but some steps are different, especially app registration on AD B2C.

[_keano]

Is there anyway to refresh the token this way?