SEC000: Securing Blazor & Web APIs with AAD

[@Yorkela]

Nice! Straight to the point, I’ve been reading that folks are confused about these very topics.

[@JunaidBedford]

You will not understand how grateful I am for this series! Awesomeness :)

[@alexclark6777]

This is brilliant. Would you be able to show an example of hitting the API directly with Postman, and doing the necessary authentication steps first to get the token?

[@HassanHabib]

Sure thing. stay tuned for the upcoming videos within this series

[@chrislangston929]

great video! I'm interested in the next video showing hitting another down-stream protected API from the initial protected API. Any idea when you'll have time to create that one?

[@AskFiqri]

Finally ! An Eid gift for me. Thank you

[@ujuzitek301]

This was very helpful. I enjoy your approach. I would like to see a video of managing putting the claims to use in terms of roles both at the blazor and api layers. Hopefully you can use Azure Functions this time.

[@fieryscorpion]

Great video! Patiently waiting for more! 😃 Thank you!

[@allied-data]

Great! Looking forward to next video in this series.

[@ndanh1]

I really appreciate your work. This helps me a lot catching up main flows of Azure AD.

[@gavinwilliams2311]

Really good tutorial! Very concise and to the point. Absolutely subscribing!

[@bryce6290]

Two thumbs up Hassan. Loved it. -Bryce

[@yaKaiZen]

great introduction and keeping the warning (29:25) in mind, but will give it a try definitely! 🙏 💚

[@musicflower-relaxingandcal2679]

Great explanation as always, and very inspiry. Thank you Hassan for your help and guide.

[@danmoyer8191]

Nice demo. We have an application where different parts of the application can be accessed using specific roles. For example a nav link to a admin page appears only when a user has admin role. A instructor page appears if a user is a instructor, but cannot be seen if user is a student. Can you discuss how one could configure authorization roles and apply them in the app and api? Currently we do authentication with AAD to get user identity and use a backend database containing users and roles the user is in. Then add claims to claim collection for the authenticated user. Authorize and AuthorView tags with specified roles restrict the UI elements the user can access. I suspect there is a easier way.

[@alexgoeckner5147]

Thanks Hassan, I've been looking for something like this. Your the best!

[@anthonyliljegren1664]

Super helpfull! been playing around with it a bit before finding this video, and it really helped me make the integration simpler.

[@MrFoghorn111]

Really enjoyed this video. I'm curious about mixing technologies here. To that end, I'm pretty sure that the MVC solution (in place of blazor) is largely a drop in replacement, but what about using the javaScript fetch API to connect to the Application API? Seems like avoiding postback screen refreshes would be a nice segue from here.

[@sssshooter]

thanks Hassan it was very interesting and just on point for my project

[@davidbrenchley]

Could you show how to do this with ADB2C?

[@shahnawazk]

Great demo on AAD, thanks Hassan.

[@ecwb]

Fantastic information, many thanks that has really helped me out!

[@apoorvahs1989]

Thank you so much for this video. It was very good. I have a question if we deploy this app and api in different azure web service , do we need to add any other configuration ?

[@antondoit]

Hassan is so great in describing.

[@ej2649]

Great video! Thank you for sharing.

[@jacksorjacksor]

Hi! Thank you so much for this! How different would the process be using Blazor WebAssembly (WASM) instead of Blazor Server? TIA!

[@fadidib8516]

Awesome video 😁

[@manivenkiteswaran2952]

This is fine for a project being built from scratch. How about incorporating the same for a existing project?

[@jorgesurillo]

if this video was with standalone wasm instead, it would be perfection!

[@cacowen]

Good info :) Maybe soon a follow up video can be how to integrate an Auth Source for "open" blazor applications. Where users "off the street" can create an account and access their info.

[@HassanHabib]

Coming very soon!

[@alexanderflanchik5227]

Really cool! Thank you!

[@awaisshabir9169]

Interesting video !

[@yourockst0ne]

I saw the post on Reddit :)

[@HassanHabib]

I preach everywhere XD

[@d3vil5oldier]

This is very good!

[@dajma00]

Ok, so now can my Blazor server app have my own Login component that I can style myself? How would I do that?

[@ajazahmad2386]

Excellence MR. HASSAN HABIB REALLY HABIBI

[@TheSecondPowerSecond]

I LOVE U

[@shatvani]

In an enterprise is it a requirment to login users automatically with SSO. Can you show how I can set up SSO in an Azure AD + Blazor WASM and Web API enviroment, please.? I do not find any comprehensive tutorial about it.

[@lab0730]

We are in the same boat, looking everywhere for an example with BLAZOR WASM. @Hassan Please make an example using Blazor WASM with a Web API.

[@shatvani]

@@lab0730 Hi, if you find something let me know, please.

[@alexgoeckner5147]

Will this work with blazor wasm?

[@talo11]

I have de same question.

[@ershadnozari]

Found it! 😉

[@thedebasispaul]

👍

[@smatthews1999]

Why would you use Blazor Server for this? No one uses Server. Please make the same video using WASM.