How to integrate AzureAD B2C with AWS API Gateway JWT Authorizer?

[@securityinaction1018]

You can download architecture diagram file from github.com/secinaction101/azureadawsapigateway and open the file in draw.io website. Please subscribe to this channel for regular updates kzbin.info/door/EEayyyCrJO94FYlzF0NLTg Thank You for the support.

[@pramodudakeri81]

This is super helpful! Thank you very much !! I was looking for something similar. Few queries - What is the difference between App Regitraions & AzureAD B2C? Can I use App Registration instead of AzureAD B2C?

[@securityinaction1018]

App registration is a configuration within Azure AD or Azure AD B2C. An app registered using App registration represents the client app that wants to use Azure AD B2C as the IdP.

[@gvoden]

Hi, I don't know why but App Roles are missing from configuration for app registraiton if I am registering the app in Azure B2C. Any tips?

[@securityinaction1018]

I am not sure. I still see in my azure developer account. If you are not seeing the option to add app roles, try manually modifying the manifest file to add app roles.

[@gvoden]

I modified the manifest and it worked like a charm

[@gvoden]

@@securityinaction1018 just a heads-up Microsoft's doc was updated to use the manifest vs app roles, so that has definitely changed but the rest of the steps are the same

[@securityinaction1018]

Thanks for sharing this detail. When I recorded this video, I remember Microsoft docs talking about modifying manifest instead of adding through the admin console. Since the console option was available, I used it at that point of time. But, looks like modifying manifest file is the right option.

[@gayathripalanisamy2781]

Hi I have one doubt, if the token got expire how that aws api gateway will recognize and response.

[@securityinaction1018]

That should be a 401 unauthorized error. Please refer this docs.aws.amazon.com/apigateway/latest/developerguide/http-api-jwt-authorizer.html. It checks for exp claim.