oauth - Azure AD: Mixing SPA with delegated user identity scenario -


i intend develop single-page-application has web api backend call other web apis on user's behalf. struggle how this.

i looked @ list of azure ad scenarios ms none of seems fit case.i think scenario mixture of spa , "web application web api" scenario link.

from understand must accomplish spa-client retrieves authorisation code , id token azure ad auth endpoint first, send them backend. backend request azure ad token endpoint needed access tokens.

is correct? how can (with adal.js)? find examples client using implicit flow, getting authorisation code skipped , end directly access token. possible @ all?

you're understanding pretty close. after configuring scenario in azure portal (see code sample on configuring scenario), you'll log in user , request access token web api. when web api receives access token, can perform on-behalf-of request azure ad requesting access downstream web api. on success, azure ad issue web api new access token can use downstream api.

in terms of support, single page app need use adal.js login user , access tokens. on web api side, azure ad supports on-behalf-of flow through adal .net , adal java. 1 nuance you'll want protect endpoints , validate tokens on web api, azure ad has built owin middleware .net, require open source equivalent java web api.

here great sample of on-behalf-of flow in action. has both single page app , native app calling .net web api.


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more