-
Notifications
You must be signed in to change notification settings - Fork 177
Update 3.1 to follow BASHER and Zero Trust guidelines #182
Conversation
nit:An Angular SPA using MSAL Angular to sign-in users with Azure Active Directory and call a protected .NET Core web API In reply to: 1182140157 In reply to: 1182140157 Refers to: 3-Authorization-II/1-call-api/README.md:1 in 4a60819. [](commit_id = 4a60819, deletion_comment = False) |
3-Authorization-II/1-call-api/AppCreationScripts/README_STEPS.md
Outdated
Show resolved
Hide resolved
this is an outdated link In reply to: 1182164196 In reply to: 1182164196 Refers to: 3-Authorization-II/1-call-api/README.md:40 in 4a60819. [](commit_id = 4a60819, deletion_comment = False) |
| `API/appsettings.json` | Authentication parameters for API project reside here. | | ||
| `API/Startup.cs` | Microsoft.Identity.Web is initialized here. | | ||
| `API/TodoListAPI/appsettings.json` | Authentication parameters for API project reside here. | | ||
| `API/TodoListAPI/Startup.cs` | Microsoft.Identity.Web is initialized here. | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@@ -30,8 +31,9 @@ This sample demonstrates an Angular single-page application (SPA) calling a ASP. | |||
|-------------------------------------|------------------------------------------------------------| | |||
| `SPA/src/app/auth-config.ts` | Authentication parameters for SPA project reside here. | | |||
| `SPA/src/app/app.module.ts` | MSAL Angular is initialized here. | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
|
||
## We'd love your feedback! | ||
|
||
Were we successful in addressing your learning objective? Consider taking a moment to [share your experience with us](https://forms.office.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR73pcsbpbxNJuZCMKN0lURpUOU5PNlM4MzRRV0lETkk2ODBPT0NBTEY5MCQlQCN0PWcu). | ||
|
||
## About the code | ||
|
||
### Access token validation | ||
### CORS settings |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
add tow lines,
In reply to: 1182223110 In reply to: 1182223110 Refers to: 3-Authorization-II/1-call-api/README.md:41 in 4a60819. [](commit_id = 4a60819, deletion_comment = False) |
In your controller, add [Authorize] decorator, which will make sure all incoming requests have an authentication bearer: | ||
For validation and debugging purposes, developers can decode **JWT**s (*JSON Web Tokens*) using [jwt.ms](https://jwt.ms). | ||
|
||
### Verifying permissions |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
brilliant, put this section in Codegen too ! #Closed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good!
Aside from a couple of nits LGTM 👍 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Purpose
Does this introduce a breaking change?
Pull Request Type
What kind of change does this Pull Request introduce?
How to Test
What to Check
Verify that the following are valid
Other Information