Azure AD Assign Roles To User
0:59
Web Api Download Multiple Files
10:35
Пікірлер
@MrRufinidaniele
@MrRufinidaniele 13 күн бұрын
Very Nice, Very good explanation of the concept with use case and example. straight to the point and crisp and clear
@balamuruganc6866
@balamuruganc6866 16 күн бұрын
Great explanation .
@vasilecuzmin5153
@vasilecuzmin5153 23 күн бұрын
Hi! Great tutorial! So in order to access a secured api from Postman, do I have to register a new instance on AD for it?
@azureteachnet
@azureteachnet 21 күн бұрын
You can use an existing client application too. No need to create a new one if you already have one. Assume, there are two projects, A and B want to consume an API. If A and B are belongs to different teams, A have to create 1 client app and B have to create another one.
@codingmaster286
@codingmaster286 24 күн бұрын
Super
@Nikhil23229
@Nikhil23229 26 күн бұрын
Thank you for your video. Can you please help us to understand how the azure service bus works woth queue and topic with .net core example.
@Nikhil23229
@Nikhil23229 26 күн бұрын
Thank you for your video. Its really helpful to know the concept practically. Can you please make videos on azure service bus and functions??
@azureteachnet
@azureteachnet 21 күн бұрын
Thanks for taking time and providing the feedback. Will make those videos in future. please subscribe to the channel if you have not subscribed yet.
@Nikhil23229
@Nikhil23229 26 күн бұрын
You are doing really a great job dear. Thank you. Your videos are very informative and it is very helpful for experienced professionals to understand the azure concept with the .net core. Thank you very much. I have a request. Can you please make videos with examples on azure function, azure keyvault and azure service bus.
@azureteachnet
@azureteachnet 21 күн бұрын
For azure key vault an extensive 1 hour video available on the channel which explains a lot which you may not find anywhere. I will make videos for azure function and service bus in future. Thank you.
@legionsman7476
@legionsman7476 Ай бұрын
how do you determine what your redirect URI is? you said you were using postman. ive never used postman. i have a test api using swagger. is that the same thing?
@veerendranuvvala7233
@veerendranuvvala7233 Ай бұрын
Hi Bro, you have literally killed it. This is the best video I have seen in internet for Deployment slots. How do I purchase your videos or How do I take paid subscription for your updated videos
@nishantjadhav6730
@nishantjadhav6730 Ай бұрын
Some properties like interests, mailboxsettings, schools, birthday, etc. giving error. Do we need to use premium version of azure?
@azureteachnet
@azureteachnet Ай бұрын
did you check if you give proper graph api permission on your client application.
@franciscosalazar8116
@franciscosalazar8116 Ай бұрын
Hi, thanks! how could I get the role in the token claims?
@azureteachnet
@azureteachnet Ай бұрын
If your question is on Front End, you can see the method which is in MSAL. If it is API, you can use Identity User Object to see the claims or even ITokenAquisation to get the entire token itself which you can decode using JWT classes.
@azureteachnet
@azureteachnet Ай бұрын
This is angular code let allAccounts = this.msalService.instance.getAllAccounts(); if (allAccounts.length > 0) { let account = allAccounts[0]; let roles = account.idTokenClaims.roles; }
@franciscosalazar8116
@franciscosalazar8116 Ай бұрын
@azureteachnet yes! I have two apps, a frontend and a backend, but I declared the roles in the backend according to the docs, then I get the token in the frontend, I need it there, but the roles are not being received :(
@azureteachnet
@azureteachnet Ай бұрын
@@franciscosalazar8116 check if you are using proper scope while generating the token.
@subho1190
@subho1190 2 ай бұрын
If you enable scope validation and role validation on a api endpoint and user has either role/scope matching but noth both then how it will behave?
@azureteachnet
@azureteachnet Ай бұрын
It would return unauthorized.
@abhishekjadhav9289
@abhishekjadhav9289 2 ай бұрын
Thank you for the video playlist. But your explanation is very small and fast. Can you explain slowly and in elaborative manner ? I am new to this topic its very hard to understand in the video.
@azureteachnet
@azureteachnet 2 ай бұрын
Thanks for the feedback. I will do it in the future videos. This video was created after many other videos which have explanations. So I thought telling the same point again and again will be redundant and waste viewers time. However, I will try to fix it. Thanks
@ericcheung8790
@ericcheung8790 2 ай бұрын
Thanks your video. I question question: It seemed if the web site being publish, the running webjobs will be stopped. Do you have this case?
@pramodahire8400
@pramodahire8400 2 ай бұрын
Can you provide github url for azure ad auth using msal and graph api
@emanuelsanchez7464
@emanuelsanchez7464 3 ай бұрын
Now that Microsoft.IdentityModel.Client.ActiveDirectory package is depreciated, is there an update?
@imxeek6157
@imxeek6157 3 ай бұрын
If i use a b2c to get the bearer token, if i use the list blobs with the token i got from my b2c will i get only the blobs that i get acces to? or i will get everyblob
@mr_don_key
@mr_don_key 3 ай бұрын
oooh boy, this is sooooo not secure... NEVER EVER use a client secret in a user facing application (running on the computer of the user). NEVER. also with oauth and entra-id, you don't have to, since there are authentication flows to choose, especially made for clients (like, desktop/console apps, or mobile apps), these flows proof you have no need for the secret at all.
@azureteachnet
@azureteachnet 3 ай бұрын
Focus of this video is to demo Azure AD authentication. in WebAPI. Yes. Secrets should not be added on the app settings and for that we need to use keyvault or azure app configuration. I make videos part by part. There is a separate 1 hour video for keyvault in the channel. Thanks.
@borekoduthundi2010
@borekoduthundi2010 3 ай бұрын
You are doing a great job❤.
@azureteachnet
@azureteachnet 3 ай бұрын
Thanks.
@Abhishek-yy3xg
@Abhishek-yy3xg 4 ай бұрын
I have done the same work around 1 but still getting cors error
@Abhishek-yy3xg
@Abhishek-yy3xg 4 ай бұрын
I am getting this error: The request doesn't contain a client_id parameter when clicking authorize button? PLease help to resolve the same. However, I am following the same code as yours/
@MsYogeshPandey
@MsYogeshPandey 4 ай бұрын
Best channel for quick and to the point learning. Great, hats off to you.
@azureteachnet
@azureteachnet 4 ай бұрын
Thanks a lot for the feedback. These kind of comments motivates me a lot to make good stuff. Please subscribe to the channel if you have not subscribed yet. Thanks.
@MsYogeshPandey
@MsYogeshPandey 4 ай бұрын
@@azureteachnet Already done and pressed the bell icon as well :)
@Abhishek-yy3xg
@Abhishek-yy3xg 4 ай бұрын
How to authenticate the generated bearer token without opening the login window after clicking authorize.
@tesabcfgh
@tesabcfgh 4 ай бұрын
👏 👏 👏 👏 👏
@chetankumar1208
@chetankumar1208 5 ай бұрын
I have generated the token but when I am hitting send request. My API not showing any result and it only showing 401 error.
@azureteachnet
@azureteachnet 5 ай бұрын
Please decode the token in jwt.io or jwt.ms and check audience. It should be ap;i://<<your app id>>
@chetankumar1208
@chetankumar1208 5 ай бұрын
Thanks but I think I was some other issue I have sending same api link in Tenant 1 and Tenant 2 in appsetting.json when I have run for single Tenant it is working.
@chetankumar1208
@chetankumar1208 5 ай бұрын
​@@azureteachnetI want to ask that in my Tenant app-2 the endpoint link is same as the Tenant-1 Endpoint link . Is it okay ?? Or it is an error ??
@azureteachnet
@azureteachnet 5 ай бұрын
@@chetankumar1208 In the configuration files of client app, you have to make sure to configure the respective clients.
@marcoalayn3633
@marcoalayn3633 5 ай бұрын
God Bless you, good man! 🧐👌
@azureteachnet
@azureteachnet 5 ай бұрын
Thanks for feedback. please subscribe to the channel if you have not subscribed yet. The channel have a lot of realtime videos on azure. Thanks
@pcmaniakkk
@pcmaniakkk 5 ай бұрын
Why did you checked "implicit flow" and "hybrid flow"??? While you are implement pkce implemention for authorisation code flow, you shouldn't check these checkbox. Also it is mentioned above of the that options.
@azureteachnet
@azureteachnet 5 ай бұрын
Good catch. I usually check that implicit flow just to make my life easier while making the video. As I used to it, Un Intentionally checked that.
@forsalemailid6305
@forsalemailid6305 5 ай бұрын
Not changing the "Private" access to the container, Is there no other way to open the URL from the browser?
@azureteachnet
@azureteachnet 5 ай бұрын
Yes.
@Muhil_kannan_
@Muhil_kannan_ 5 ай бұрын
Hey could you please share some idea to fetch the details of currently logged in user alone? Eg. If i login to that application i want my details alone. I don't want to get entire users info
@azureteachnet
@azureteachnet 5 ай бұрын
What do you want to get? If you need email you can get it from the token itself.
@Muhil_kannan_
@Muhil_kannan_ 5 ай бұрын
​@@azureteachnet i want to fetch displayname surname givename mail and company name
@azureteachnet
@azureteachnet 5 ай бұрын
@@Muhil_kannan_ you can call graph api. It exposes multiple endpoints. /me endpoint gives you what you are looking for
@Muhil_kannan_
@Muhil_kannan_ 5 ай бұрын
@@azureteachnet thanks man !!
@shrinivaschakravarthy
@shrinivaschakravarthy 5 ай бұрын
Very nice and helpful article brother. Please create a video and explain the logic as you said at the end of the video. Also, can you make a video on enabling multiple authentication schemes like JWT and API key-based authentication/authorization on a .Net Web API application??
@azureteachnet
@azureteachnet 5 ай бұрын
Thanks a lot for the feedback. Sure. I will.
@Vinothm24
@Vinothm24 6 ай бұрын
Great video sir
@azureteachnet
@azureteachnet 6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@nageshajab1
@nageshajab1 6 ай бұрын
nice video, thanks
@cihlen
@cihlen 6 ай бұрын
Thank you for the video, it was very helpful since I also got the CORS error and it helped me find a workaround.
@rahulbisen1174
@rahulbisen1174 6 ай бұрын
Hi, All of your videos are really helpful, and the way you explain things is amazing. I have one question: I have a web API application with a few APIs that I need to share with another team and a few APIs that I want to integrate into my app. Could you please tell me which of your videos would be helpful for this? I can't figure out which one to watch.
@manok8308
@manok8308 6 ай бұрын
I can say it's very helpful tutorial, it clear lots of doubts and give a lot of insights. Thanks, and keep doing the good work. However, I am wondering the below things, I am requesting you to please explain? so that others who may have the same doubts can also refer the same. 1. I am not seeing any refresh token concepts in both Angular and Web API or I don't see any call made to get refresh token in both apps. 2. What happens if the token gets expired? how and where to maintain this logic. 3. I don't see you append any access token in the header while making the http call ? how come we pass both access and refresh token ?
@azureteachnet
@azureteachnet 6 ай бұрын
Thanks for the feedback. Right now I dont have any videos which shows angualr refresh token with Azure AD. will make video soon.
@sanjaypardeshi8914
@sanjaypardeshi8914 6 ай бұрын
Can we get the user details like subscription name , plan name, subscription state, Tenant ID using GraphAPI? Once the user login through Azure AD I want to show this information on landing page.
@azureteachnet
@azureteachnet 6 ай бұрын
You can get the things which are listed in the below url. This is Graph Api explorer created by Microsoft. I dont think it is possible to get the details that you mentioned with Graph API. Microsoft provides other tons of apis. You can search for Microsoft Component API or other Azure Apis. Basically Subscription Id serves as an identification. developer.microsoft.com/en-us/graph/graph-explorer
@fausioluis9789
@fausioluis9789 6 ай бұрын
helpful Thanks, is possible to get the current user email ?
@azureteachnet
@azureteachnet 6 ай бұрын
It is possible. You can get it from the token claims. I guess the git repo have the details.
@fausioluis9789
@fausioluis9789 5 ай бұрын
@@azureteachnet thanks
@guilhermefaria1285
@guilhermefaria1285 6 ай бұрын
Great explanation. Which users will have a successful login when trying to acquire the token? All users from your directory, or is a specific permission required?
@azureteachnet
@azureteachnet 6 ай бұрын
Right now, any one who can log on to the directory can access this. If you need any restrication as such, you can use role claims on API. you can do it in other ways too.
@VikasSingh-ve4fp
@VikasSingh-ve4fp 6 ай бұрын
Simply best
@azureteachnet
@azureteachnet 6 ай бұрын
Thanks a lot for the feedback. Please subscribe to the channel if you have not subscribed yet.
@priyankjoshi6869
@priyankjoshi6869 6 ай бұрын
Do we need a separate Azure ad app registration for web API We already have an app registration for angular app? Can we use the same client ID and tenant ID for web api as we are using for angular UI?
@azureteachnet
@azureteachnet 6 ай бұрын
No
@ivanraineri6831
@ivanraineri6831 6 ай бұрын
thx!
@azureteachnet
@azureteachnet 6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@bandasanthosh
@bandasanthosh 6 ай бұрын
How do we get logged in user email using this method
@azureteachnet
@azureteachnet 6 ай бұрын
you can decode the token. It will have the email in claims.
@bandasanthosh
@bandasanthosh 6 ай бұрын
@@azureteachnet do you have any video on how to decode them or any other resource where I can refer to?
@azureteachnet
@azureteachnet 5 ай бұрын
@@bandasanthosh do you mean the token? Token can be decoded using Base64. You can use http client to forward the token. There are many other ways present to achive that.
@bandasanthosh
@bandasanthosh 5 ай бұрын
@@azureteachnet Sorry for asking multiple times.. do you have some reference guide for end to end process?
@azureteachnet
@azureteachnet 5 ай бұрын
@@bandasanthosh still I did not understand what you are looking for. can you please elaborate your requirement? If you are looking for authentication and authorization, the channel have a playlist which has at least 10 videos. If you want to pass token from one api to other here is the video. kzbin.info/www/bejne/oKfCp5xnfJuYfaM if you use the same audience for both APIs, you can simply pass the token as is. To get the token in your API, you can Enable Token Aquisation or write your own middleware to get the token and pass it.
@gauravphone2962
@gauravphone2962 6 ай бұрын
Thank you so much for making this video ❤❤❤ It really helped me a lot to understand the azure API authentication 🥳🥳 God Bless You 🙏
@azureteachnet
@azureteachnet 6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@manikantareddy2385
@manikantareddy2385 7 ай бұрын
Hi, how to redirect /login-failed route if login is not failed.
@richardwaldron1684
@richardwaldron1684 7 ай бұрын
Brilliant demo!. I'm studying for my AZ-104 and have never used App Services at all so it's all new to me. The clarity and detail of your video that starts rights from the beginning of the process including what problem deployment slots are meant solve was really helpful. Thanks for sharing
@danilomiranda1871
@danilomiranda1871 7 ай бұрын
hi!, you have created 2 app in the register apps azure, this is for development environment, but for qa or production, i will have create other applications in azure?
@shrinivaschakravarthy
@shrinivaschakravarthy 7 ай бұрын
I see that the scope created was only for one API controller. Can't we make it work without a scope or by using the .default scope?? I think the role(s) was alone enough with default scope. Can you explain please?
@amanraut5304
@amanraut5304 8 ай бұрын
Please make a video on federated crentaial in azure
@NileshBhosale-w1b
@NileshBhosale-w1b 8 ай бұрын
Hello, I have tried but at time of generating the token giving error as HTTP Error 400. The request hostname is invalid, can you please comment if there is any revision take place?
@mickduster
@mickduster 8 ай бұрын
Great resource. Thank you.