41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08790-707a-7378-bdb9-94eef03e2e95

Always check permissions in tokens in an Azure AD protected API

joonasw.net · published 5 August 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at joonasw.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 8
Words captured: 1,348

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/juunas11/7-deadly-sins-in-azure-ad-app-development/tree/master/CheckingScopesInApi/EmployeeApi

github.com

https://github.com/juunas11/7-deadly-sins-in-azure-ad-app-development/tree/master/CheckingScopesInApi/EmployeeApi.WithScopeChecks

github.com

https://github.com/juunas11/7-deadly-sins-in-azure-ad-app-development/tree/master/DataStealingApp

github.com

https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent

docs.microsoft.com

https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-permissions-and-consent

docs.microsoft.com

Defining permission scopes and roles offered by an app in Azure AD Read at the source ↗

https://github.com/juunas11/7-deadly-sins-in-azure-ad-app-development/blob/d602be4c0981d459ebcde82b155be66919109a05/CheckingScopesInApi/EmployeeApi/Startup.cs

github.com

https://github.com/juunas11/7-deadly-sins-in-azure-ad-app-development/blob/d602be4c0981d459ebcde82b155be66919109a05/DataStealingApp/DataStealingApp/Controllers/HomeController.cs

github.com