How to Build and Deploy a Secure Serverless Application Using Azure Functions

[@Falckodotcom]

Sometimes you will search for days on KZbin without finding the answer your looking for. And then.... you find this video! Thank you so much for creating this very informative video!!

[@petel9242]

I really enjoyed this video Matt. You have a great, clear, succinct teaching style. No fluff, just important stuff. I wish you had hundreds of videos available, because you really are a great teacher

[@fullstackmatt]

Thank you!

[@syedburhanofficial]

@@fullstackmatt Please upload more videos

[@YYZRichard]

That’s the best video ever: simple, direct to the point, easy to follow. Keep up the good work. Looking forward to more videos.

[@sabarinathg5704]

Thanks a lot, I was searching for how to avoid passing the function code to the client, and this video explains. Wonderful

[@georgeboydratcliff1036]

Brilliant! Clear, concise and at just the right speed! Thank you

[@anibaldk]

This was excellent indeed. If I can make a suggestion: these things are usually expected to be automated via infra as code (e.g. Terraform). How about redoing (or making a post) to tackle this scenario in a 100% headless fashion?

[@jayamalw]

Matt, simply you are a great person. Hope you will have time to create more like this. Please share me if you are in udemy or any online learning media. 🙏🙏🙏

[@akishaha]

Thanks for this informative video with all the steps.

[@DisplacedCzech]

Great video. Right on point! You need to make more of these!

[@TheSibalo]

Thank you for the video, where do i get the policy you used ?

[@marcojr]

You are a life saviour !

[@TheScottishDad]

This is great and really helped me - quick question though. If I was publishing an app for a user and presented them with a custom login screen, how would they get a token to start using my application and hide all of the complexity from them in regard to getting a token? All the user wants to do is login and land on a home page and start using an app, this bit I need help with. Thanks

[@fullstackmatt]

This might help: docs.microsoft.com/en-us/azure/active-directory-b2c/customize-ui-with-html?pivots=b2c-user-flow

[@atsarkar]

Awesome explanation and described crystal clear. Could you please share the link for the Prior Video for creating the Single Page Az B2C App registration? Am interested to see the complete process

[@marcoszanre]

Great tutorial, thanks for sharing!

You are a GOD man! You have saved a lot of my time through this video

[@wonglapchi]

Hi Matt, this is a super great video ! Just wanted to add a feedback around the consumption plan function. Although the current setup required to JWT token. If you hit the consumption plan function app endpoint directly, you can still bypass the APIM gateway. Probably in the next video to include IP Restriction of the function app etc

[@fullstackmatt]

lap chi wong thanks. The function app is publicly accessible but only if you have the access code. I set up the Function level authorisation. The IP whitelisting is a good idea but not recommended when using the consumption plan because the IP address might change. It would be ok if you’re using an App Service Plan or ASE. Thanks for the comment.

[@wonglapchi]

@@fullstackmatt the ip restriction is for inbound only so there is no certain about if consumption plan IP is changing or not. The certain is to allow Apim outbound IP address. If you use the consumption plan APIM, then this is going to be an issue. However, if you use any better tier of consumption plan apim then there is no issue.

[@motsinio4039]

Thank you matt, you are one of the best..

[@mowcow4609]

Great Video!!! very informative and helpful

[@marioilsanker4307]

Hi Matt, thank you very much for this excellent tutorial! Subscribed! :)

[@bowenwu9964]

This is brilliant. The most informative yet concise tutorial I have found. May I ask why we need a separate AAD for the API management instead of using the Travel Pigeon AAD created earlier?

[@fullstackmatt]

Thanks! Great question. Azure creates a separate tenant for your B2C directory because it’s a separate product and is customer facing. Official docs say: “Azure AD and Azure AD B2C are separate product offerings and cannot coexist in the same tenant. An Azure AD tenant represents an organization. An Azure AD B2C tenant represents a collection of identities to be used with relying party applications.” docs.microsoft.com/en-us/azure/active-directory-b2c/faq?tabs=app-reg-ga#can-i-use-azure-ad-b2c-features-in-my-existing-employee-based-azure-ad-tenant

[@bowenwu9964]

@@fullstackmatt Thank you for the clarification! I really enjoyed this video.

[@aliashoori8274]

Absolutely helpful - thanks for this

[@alexanderressler6338]

Very good video. Thanks! Now I'd like to replicate this with ARM templates.

[@anzaralim3616]

Thanks for Your video, everthing is working correctly. But how to solve CORS issue

[@mowcow4609]

more azure video, please

[@istovall2624]

more videos please

[@BogdanNicovski]

Hey Matt, thanks for this amazing video. I want to create a mobile app that will communicate to the database via azure functions. I'm not sure what kind of authentication/authorization to use. I want to hide all keys/codes from the https calls because the mobile app is a piece of a cake for hacking :) Every suggestion is going to be appreciated. Thanks

[@fullstackmatt]

Sorry about the late reply! You would probably want to use authorization code flow for a native mobile app docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow

[@BogdanNicovski]

@@fullstackmatt thanks

[@jesuslopez-bm5vk]

Open Source: Barracuda Identity Provider for Azure Functions, OAuth 2.0 and OpenID. Nugget Package: www.nuget.org/packages/Identity.Provider.Barracuda/ Video: kzbin.info/www/bejne/Y2PCd3iIa7N_a6s Documentation: www.chambapatodos.com/?epkb_post_type_1=identity-provider Barracuda OpenAPI for Azure Functions, OpenAPI 3.0 and SWAGGER. Nuget Package: www.nuget.org/packages/Barracuda.OpenApi/ Video: kzbin.info/www/bejne/pp7YZHaIorOUr68 Documentation: www.chambapatodos.com/?epkb_post_type_1=open-api-package

[@gjgiraldo1]

Great video the best , easy to understand Gabriel Ultrasoftware.co