2

I need some help with implementing authorization infrastructure for my application.

I have a Angular SPA application that works with a Web API. This Web API in turns uses another Web API to serve its request. So, I have totally 2 Web APIs and a Angular SPA application.

I want the users of the Angular SPA application to be authenticated by our Azure AD account, and then share this token with other two Web APIs to authenticate the requests.

Please advise how to go about it, any thoughts are much appreciated.

1 Answer 1

4

So the flow looks like:

1.Sign-in the user in the SPA application.

2.Acquire a token to A Web API and call it.

3.A Web API then calls B Web API.

Take a look at this sample. It uses the On-Befalf-Of flow which applies to your scenario.

Sign up to request clarification or add additional context in comments.

2 Comments

hello Caiyi, can you please share the sample link again. for some reason it seem to be not loading. thanks
Please help me on this. I understand that the client will prompt for username and password. Is there anyway that you can simply type the credentials or pass it whatever way to get a token?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.