Very Nice, Very good explanation of the concept with use case and example. straight to the point and crisp and clear
@balamuruganc686616 күн бұрын
Great explanation .
@vasilecuzmin515323 күн бұрын
Hi! Great tutorial! So in order to access a secured api from Postman, do I have to register a new instance on AD for it?
@azureteachnet21 күн бұрын
You can use an existing client application too. No need to create a new one if you already have one. Assume, there are two projects, A and B want to consume an API. If A and B are belongs to different teams, A have to create 1 client app and B have to create another one.
@codingmaster28624 күн бұрын
Super
@Nikhil2322926 күн бұрын
Thank you for your video. Can you please help us to understand how the azure service bus works woth queue and topic with .net core example.
@Nikhil2322926 күн бұрын
Thank you for your video. Its really helpful to know the concept practically. Can you please make videos on azure service bus and functions??
@azureteachnet21 күн бұрын
Thanks for taking time and providing the feedback. Will make those videos in future. please subscribe to the channel if you have not subscribed yet.
@Nikhil2322926 күн бұрын
You are doing really a great job dear. Thank you. Your videos are very informative and it is very helpful for experienced professionals to understand the azure concept with the .net core. Thank you very much. I have a request. Can you please make videos with examples on azure function, azure keyvault and azure service bus.
@azureteachnet21 күн бұрын
For azure key vault an extensive 1 hour video available on the channel which explains a lot which you may not find anywhere. I will make videos for azure function and service bus in future. Thank you.
@legionsman7476Ай бұрын
how do you determine what your redirect URI is? you said you were using postman. ive never used postman. i have a test api using swagger. is that the same thing?
@veerendranuvvala7233Ай бұрын
Hi Bro, you have literally killed it. This is the best video I have seen in internet for Deployment slots. How do I purchase your videos or How do I take paid subscription for your updated videos
@nishantjadhav6730Ай бұрын
Some properties like interests, mailboxsettings, schools, birthday, etc. giving error. Do we need to use premium version of azure?
@azureteachnetАй бұрын
did you check if you give proper graph api permission on your client application.
@franciscosalazar8116Ай бұрын
Hi, thanks! how could I get the role in the token claims?
@azureteachnetАй бұрын
If your question is on Front End, you can see the method which is in MSAL. If it is API, you can use Identity User Object to see the claims or even ITokenAquisation to get the entire token itself which you can decode using JWT classes.
@azureteachnetАй бұрын
This is angular code let allAccounts = this.msalService.instance.getAllAccounts(); if (allAccounts.length > 0) { let account = allAccounts[0]; let roles = account.idTokenClaims.roles; }
@franciscosalazar8116Ай бұрын
@azureteachnet yes! I have two apps, a frontend and a backend, but I declared the roles in the backend according to the docs, then I get the token in the frontend, I need it there, but the roles are not being received :(
@azureteachnetАй бұрын
@@franciscosalazar8116 check if you are using proper scope while generating the token.
@subho11902 ай бұрын
If you enable scope validation and role validation on a api endpoint and user has either role/scope matching but noth both then how it will behave?
@azureteachnetАй бұрын
It would return unauthorized.
@abhishekjadhav92892 ай бұрын
Thank you for the video playlist. But your explanation is very small and fast. Can you explain slowly and in elaborative manner ? I am new to this topic its very hard to understand in the video.
@azureteachnet2 ай бұрын
Thanks for the feedback. I will do it in the future videos. This video was created after many other videos which have explanations. So I thought telling the same point again and again will be redundant and waste viewers time. However, I will try to fix it. Thanks
@ericcheung87902 ай бұрын
Thanks your video. I question question: It seemed if the web site being publish, the running webjobs will be stopped. Do you have this case?
@pramodahire84002 ай бұрын
Can you provide github url for azure ad auth using msal and graph api
@emanuelsanchez74643 ай бұрын
Now that Microsoft.IdentityModel.Client.ActiveDirectory package is depreciated, is there an update?
@imxeek61573 ай бұрын
If i use a b2c to get the bearer token, if i use the list blobs with the token i got from my b2c will i get only the blobs that i get acces to? or i will get everyblob
@mr_don_key3 ай бұрын
oooh boy, this is sooooo not secure... NEVER EVER use a client secret in a user facing application (running on the computer of the user). NEVER. also with oauth and entra-id, you don't have to, since there are authentication flows to choose, especially made for clients (like, desktop/console apps, or mobile apps), these flows proof you have no need for the secret at all.
@azureteachnet3 ай бұрын
Focus of this video is to demo Azure AD authentication. in WebAPI. Yes. Secrets should not be added on the app settings and for that we need to use keyvault or azure app configuration. I make videos part by part. There is a separate 1 hour video for keyvault in the channel. Thanks.
@borekoduthundi20103 ай бұрын
You are doing a great job❤.
@azureteachnet3 ай бұрын
Thanks.
@Abhishek-yy3xg4 ай бұрын
I have done the same work around 1 but still getting cors error
@Abhishek-yy3xg4 ай бұрын
I am getting this error: The request doesn't contain a client_id parameter when clicking authorize button? PLease help to resolve the same. However, I am following the same code as yours/
@MsYogeshPandey4 ай бұрын
Best channel for quick and to the point learning. Great, hats off to you.
@azureteachnet4 ай бұрын
Thanks a lot for the feedback. These kind of comments motivates me a lot to make good stuff. Please subscribe to the channel if you have not subscribed yet. Thanks.
@MsYogeshPandey4 ай бұрын
@@azureteachnet Already done and pressed the bell icon as well :)
@Abhishek-yy3xg4 ай бұрын
How to authenticate the generated bearer token without opening the login window after clicking authorize.
@tesabcfgh4 ай бұрын
👏 👏 👏 👏 👏
@chetankumar12085 ай бұрын
I have generated the token but when I am hitting send request. My API not showing any result and it only showing 401 error.
@azureteachnet5 ай бұрын
Please decode the token in jwt.io or jwt.ms and check audience. It should be ap;i://<<your app id>>
@chetankumar12085 ай бұрын
Thanks but I think I was some other issue I have sending same api link in Tenant 1 and Tenant 2 in appsetting.json when I have run for single Tenant it is working.
@chetankumar12085 ай бұрын
@@azureteachnetI want to ask that in my Tenant app-2 the endpoint link is same as the Tenant-1 Endpoint link . Is it okay ?? Or it is an error ??
@azureteachnet5 ай бұрын
@@chetankumar1208 In the configuration files of client app, you have to make sure to configure the respective clients.
@marcoalayn36335 ай бұрын
God Bless you, good man! 🧐👌
@azureteachnet5 ай бұрын
Thanks for feedback. please subscribe to the channel if you have not subscribed yet. The channel have a lot of realtime videos on azure. Thanks
@pcmaniakkk5 ай бұрын
Why did you checked "implicit flow" and "hybrid flow"??? While you are implement pkce implemention for authorisation code flow, you shouldn't check these checkbox. Also it is mentioned above of the that options.
@azureteachnet5 ай бұрын
Good catch. I usually check that implicit flow just to make my life easier while making the video. As I used to it, Un Intentionally checked that.
@forsalemailid63055 ай бұрын
Not changing the "Private" access to the container, Is there no other way to open the URL from the browser?
@azureteachnet5 ай бұрын
Yes.
@Muhil_kannan_5 ай бұрын
Hey could you please share some idea to fetch the details of currently logged in user alone? Eg. If i login to that application i want my details alone. I don't want to get entire users info
@azureteachnet5 ай бұрын
What do you want to get? If you need email you can get it from the token itself.
@Muhil_kannan_5 ай бұрын
@@azureteachnet i want to fetch displayname surname givename mail and company name
@azureteachnet5 ай бұрын
@@Muhil_kannan_ you can call graph api. It exposes multiple endpoints. /me endpoint gives you what you are looking for
@Muhil_kannan_5 ай бұрын
@@azureteachnet thanks man !!
@shrinivaschakravarthy5 ай бұрын
Very nice and helpful article brother. Please create a video and explain the logic as you said at the end of the video. Also, can you make a video on enabling multiple authentication schemes like JWT and API key-based authentication/authorization on a .Net Web API application??
@azureteachnet5 ай бұрын
Thanks a lot for the feedback. Sure. I will.
@Vinothm246 ай бұрын
Great video sir
@azureteachnet6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@nageshajab16 ай бұрын
nice video, thanks
@cihlen6 ай бұрын
Thank you for the video, it was very helpful since I also got the CORS error and it helped me find a workaround.
@rahulbisen11746 ай бұрын
Hi, All of your videos are really helpful, and the way you explain things is amazing. I have one question: I have a web API application with a few APIs that I need to share with another team and a few APIs that I want to integrate into my app. Could you please tell me which of your videos would be helpful for this? I can't figure out which one to watch.
@manok83086 ай бұрын
I can say it's very helpful tutorial, it clear lots of doubts and give a lot of insights. Thanks, and keep doing the good work. However, I am wondering the below things, I am requesting you to please explain? so that others who may have the same doubts can also refer the same. 1. I am not seeing any refresh token concepts in both Angular and Web API or I don't see any call made to get refresh token in both apps. 2. What happens if the token gets expired? how and where to maintain this logic. 3. I don't see you append any access token in the header while making the http call ? how come we pass both access and refresh token ?
@azureteachnet6 ай бұрын
Thanks for the feedback. Right now I dont have any videos which shows angualr refresh token with Azure AD. will make video soon.
@sanjaypardeshi89146 ай бұрын
Can we get the user details like subscription name , plan name, subscription state, Tenant ID using GraphAPI? Once the user login through Azure AD I want to show this information on landing page.
@azureteachnet6 ай бұрын
You can get the things which are listed in the below url. This is Graph Api explorer created by Microsoft. I dont think it is possible to get the details that you mentioned with Graph API. Microsoft provides other tons of apis. You can search for Microsoft Component API or other Azure Apis. Basically Subscription Id serves as an identification. developer.microsoft.com/en-us/graph/graph-explorer
@fausioluis97896 ай бұрын
helpful Thanks, is possible to get the current user email ?
@azureteachnet6 ай бұрын
It is possible. You can get it from the token claims. I guess the git repo have the details.
@fausioluis97895 ай бұрын
@@azureteachnet thanks
@guilhermefaria12856 ай бұрын
Great explanation. Which users will have a successful login when trying to acquire the token? All users from your directory, or is a specific permission required?
@azureteachnet6 ай бұрын
Right now, any one who can log on to the directory can access this. If you need any restrication as such, you can use role claims on API. you can do it in other ways too.
@VikasSingh-ve4fp6 ай бұрын
Simply best
@azureteachnet6 ай бұрын
Thanks a lot for the feedback. Please subscribe to the channel if you have not subscribed yet.
@priyankjoshi68696 ай бұрын
Do we need a separate Azure ad app registration for web API We already have an app registration for angular app? Can we use the same client ID and tenant ID for web api as we are using for angular UI?
@azureteachnet6 ай бұрын
No
@ivanraineri68316 ай бұрын
thx!
@azureteachnet6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@bandasanthosh6 ай бұрын
How do we get logged in user email using this method
@azureteachnet6 ай бұрын
you can decode the token. It will have the email in claims.
@bandasanthosh6 ай бұрын
@@azureteachnet do you have any video on how to decode them or any other resource where I can refer to?
@azureteachnet5 ай бұрын
@@bandasanthosh do you mean the token? Token can be decoded using Base64. You can use http client to forward the token. There are many other ways present to achive that.
@bandasanthosh5 ай бұрын
@@azureteachnet Sorry for asking multiple times.. do you have some reference guide for end to end process?
@azureteachnet5 ай бұрын
@@bandasanthosh still I did not understand what you are looking for. can you please elaborate your requirement? If you are looking for authentication and authorization, the channel have a playlist which has at least 10 videos. If you want to pass token from one api to other here is the video. kzbin.info/www/bejne/oKfCp5xnfJuYfaM if you use the same audience for both APIs, you can simply pass the token as is. To get the token in your API, you can Enable Token Aquisation or write your own middleware to get the token and pass it.
@gauravphone29626 ай бұрын
Thank you so much for making this video ❤❤❤ It really helped me a lot to understand the azure API authentication 🥳🥳 God Bless You 🙏
@azureteachnet6 ай бұрын
Thanks for the feedback. Please subscribe to the channel if you have not subscribed yet.
@manikantareddy23857 ай бұрын
Hi, how to redirect /login-failed route if login is not failed.
@richardwaldron16847 ай бұрын
Brilliant demo!. I'm studying for my AZ-104 and have never used App Services at all so it's all new to me. The clarity and detail of your video that starts rights from the beginning of the process including what problem deployment slots are meant solve was really helpful. Thanks for sharing
@danilomiranda18717 ай бұрын
hi!, you have created 2 app in the register apps azure, this is for development environment, but for qa or production, i will have create other applications in azure?
@shrinivaschakravarthy7 ай бұрын
I see that the scope created was only for one API controller. Can't we make it work without a scope or by using the .default scope?? I think the role(s) was alone enough with default scope. Can you explain please?
@amanraut53048 ай бұрын
Please make a video on federated crentaial in azure
@NileshBhosale-w1b8 ай бұрын
Hello, I have tried but at time of generating the token giving error as HTTP Error 400. The request hostname is invalid, can you please comment if there is any revision take place?