1. Contents
  2. 7. Introduction to Authentication & Authorization with Azure AD B2C

7. Introduction to Authentication & Authorization with Azure AD B2CΒΆ

  1. 7.1. Introduction and Key Concepts
    1. 7.1.1. Key Concepts
      1. 7.1.1.1. Authentication
      2. 7.1.1.2. Authorization
      3. 7.1.1.3. Delegation
      4. 7.1.1.4. OAuth & OIDC
    2. 7.1.2. Learn More
  2. 7.2. Walkthrough: Explore OAuth & OIDC
    1. 7.2.1. How OAuth Works
      1. 7.2.1.1. Explore OAuth
    2. 7.2.2. OAuth Grant Types
      1. 7.2.2.1. Authorization Code Grant Flow
      2. 7.2.2.2. Implicit Grant Flow
      3. 7.2.2.3. JSON Web Tokens (JWT)
    3. 7.2.3. OpenID Connect (OIDC)
    4. 7.2.4. Azure AD B2C
  3. 7.3. Azure AD B2C Practical Fundamentals
    1. 7.3.1. Entities of Our System
    2. 7.3.2. Components of Azure AD B2C
      1. 7.3.2.1. Tenant Directory
      2. 7.3.2.2. Registered Applications
      3. 7.3.2.3. Scopes
  4. 7.4. Walkthrough: Set Up Azure ADB2C Tenant & Identity Tokens
    1. 7.4.1. Checklist
    2. 7.4.2. Set Up AADB2C Tenant Directory
      1. 7.4.2.1. Create Tenant Directory
      2. 7.4.2.2. Link tenant directory to your Subscription
    3. 7.4.3. Register & Configure an AADB2C Application
      1. 7.4.3.1. Register the Coding Events API application
      2. 7.4.3.2. Configure the Coding Events API application registration
    4. 7.4.4. Set Up the SUSI Flow
      1. 7.4.4.1. Create a SUSI flow
    5. 7.4.5. Test the User Flow
      1. 7.4.5.1. Run the SUSI flow
      2. 7.4.5.2. Register a user account
      3. 7.4.5.3. Inspect the identity token
  5. 7.5. Walkthrough: Set Up Access Token Authorization with Azure ADB2C
    1. 7.5.1. Checklist
    2. 7.5.2. The Final Coding Events API Version
    3. 7.5.3. Set Up Postman
      1. 7.5.3.1. Import the Coding Events API Collection
      2. 7.5.3.2. Configure the Access Token Request Form
    4. 7.5.4. Protect the Coding Events API
      1. 7.5.4.1. Expose a user_impersonation Scope for the API
    5. 7.5.5. Register & Configure the Postman Client Application
      1. 7.5.5.1. Register the Postman Client Application
      2. 7.5.5.2. Configure Authentication
      3. 7.5.5.3. Grant Admin Permissions for Using the Scope
    6. 7.5.6. Test the User Flow for Access Tokens
      1. 7.5.6.1. Get the Authorization URL
      2. 7.5.6.2. Explore the Access Token
    7. 7.5.7. Get the Postman Access Token
      1. 7.5.7.1. Replacing an Expired Access Token
  6. 7.6. Studio Part 1: Deploy Coding Events API with AADB2C
    1. 7.6.1. Setup
      1. 7.6.1.1. Set Up Local MySQL
      2. 7.6.1.2. Set Up Local Secrets Manager
      3. 7.6.1.3. Update the Coding Events API
    2. 7.6.2. Run Locally
      1. 7.6.2.1. Checklist
      2. 7.6.2.2. Viewing Documentation
      3. 7.6.2.3. Make Requests to Protected Endpoints
    3. 7.6.3. Limited Guidance: API Deployment
      1. 7.6.3.1. Provision Resources
      2. 7.6.3.2. Configuration Scripts
    4. 7.6.4. Gotchas
      1. 7.6.4.1. Expired or Missing Access Token
      2. 7.6.4.2. Incorrect Configuration in appsettings.json
      3. 7.6.4.3. Opening the Correct Port
    5. 7.6.5. Deliverable
  7. 7.7. Studio Part 2: Explore Authorization With the Deployed API
    1. 7.7.1. Task Roles
    2. 7.7.2. Limited Guidance: Completing a Task
      1. 7.7.2.1. General Steps
      2. 7.7.2.2. Planning Tips
    3. 7.7.3. Setup
      1. 7.7.3.1. Update Postman
      2. 7.7.3.2. Get Access Tokens
      3. 7.7.3.3. Bonus: Multiple Front-end Client Applications
    4. 7.7.4. Completing a Task
      1. 7.7.4.1. Example Solution: Join a Coding Event
    5. 7.7.5. Tasks
      1. 7.7.5.1. Join a Coding Event
      2. 7.7.5.2. View Coding Event Members
      3. 7.7.5.3. Add a Tag to a Coding Event
      4. 7.7.5.4. Remove a Tag From a Coding Event
      5. 7.7.5.5. Remove a Member From a Coding Event
      6. 7.7.5.6. Leave a Coding Event
      7. 7.7.5.7. Cancel a Coding Event