azure-api-apps

Azure API Apps with AllowAnonymous

坚强是说给别人听的谎言 提交于 2019-12-08 14:40:05
问题 With an Azure API App, is there a way to have a mix of authentication levels for different endpoints in the underlying Web API? I want the API App to have access level of 'Public (authenticated)' but one of the endpoints needs to be accessible as an anonymous user. Previously I would have just applied the AllowAnonymous attribute on the method, but the gateway still intercepts and returns an unauthenticated response. The only other thing I can think of is to set the API App to 'Public

Accessing authenticated Azure API APP

风流意气都作罢 提交于 2019-12-08 07:10:51
问题 I have an Azure API APP that I have set up to use Azure AD authentication. Like so: I also have a console app that have a generated client API to my API APP like this: If I disable the authentication on the API APP, I can call the API from my console app. If I enable the Azure AD authentication, the client can not call the API due to "not authorized" exception, which is ofcourse expected. I have searched all over the place to find any information on how to supply credentials of the correct

CORS Prelight Issue

依然范特西╮ 提交于 2019-12-07 02:46:26
I am getting following error for a jQuery call to my azure app proxy XMLHttpRequest cannot load https://azentsearchdev01-mytenant.msappproxy.net/search?text=mytext&type=json&callback=json_callback . Response for preflight is invalid (redirect) This is what I am doing From mytenantsite.sharepoint.com, making a call jQuery call to an Azure app on the folliwing url - https://azentsearchdev01-mytenant.msappproxy.net As part of the call, I am setting an authorization header with authentication token (access token) from Azure AD The jQuery call is fails with a 302 redirect to https://login

Manage versioned API in Azure API Manager

喜夏-厌秋 提交于 2019-12-06 11:02:20
I´m looking into host our web API in Azure using an API app. I am using the Azure API Manager in front of the API App to expose the developer portal to some of our consumers. The web API is built in .NET core and it has version support using the URL ( https://example.com/api/v2/controller.. .). I have given it swagger support and one swagger.json is created for each version. These swagger files I use in my ARM templates to set up API Manager and expose this versioned API. When adding a version to API Manager I have to give a path which must be unique for the API Im adding. So for version v1 I

Access security to an Azure App Service API App

ε祈祈猫儿з 提交于 2019-12-06 09:41:53
We have a system that is based on 2 tiers, a Backend tier and a Frontend tier, right now both are Azure WebSites communicating trough WebAPI. I wan't to move the backend WebAPI to API App - question is - if it's possible to configure the security of an API App in such way, that it is only accessible from the configured Frontend ASP.NET MVC 6 Web application (hosted in Azure WebSites). We planned to use Active Directory as an authentication method between the frontend Web App and the backend Web App, so that only the frontend can have access to the backend WebAPI. Is this the most secure way?

Azure Functions and Azure Application Gateway or API Management

我与影子孤独终老i 提交于 2019-12-05 23:06:54
问题 I have several Microsoft Azure functions developed. I would like to use a gateway with firewall to make my Azure functions available and protected using one public IP only. Is there way to use Azure Functions with Azure Application Gateway or API Management? What would be the best approach in this case? 回答1: Azure API management allows you to provide a single access point for all your customers. If you've made a HTTP triggered Azure Function (or any SOAP or REST service for that matter), you

401 error when authenticating to an Azure API App using AAD

别等时光非礼了梦想. 提交于 2019-12-04 06:12:20
I have an API app that has been working fine with a Gateway Host and now that the gateway host is being deprecated I'm trying to follow the Migration Guide . I've redeployed my service using the 2.8.1 SDK and can log into the service with a browser using AAD or a Microsoft account and use Swagger to test the service. However, I'm trying to get a client to access the service using a ClientId and Secret. The code is able to get the access token from AAD but I always get a 401 error whenever I try to access one of the service resources. When I debug the service I see the following in the log:

Azure Functions and Azure Application Gateway or API Management

我与影子孤独终老i 提交于 2019-12-04 05:07:22
I have several Microsoft Azure functions developed. I would like to use a gateway with firewall to make my Azure functions available and protected using one public IP only. Is there way to use Azure Functions with Azure Application Gateway or API Management? What would be the best approach in this case? Azure API management allows you to provide a single access point for all your customers. If you've made a HTTP triggered Azure Function (or any SOAP or REST service for that matter), you can use API management to provide a central access point for this function. This allows you to do load

Azure Logic Apps error While Adding API Apps

瘦欲@ 提交于 2019-12-02 22:08:08
问题 I am doing on POC for getting records from On-Premise SQL By using Logic Apps + API Apps. I have created SQL Connector in API Apps and also created Logic Apps. But when try to add the SQL Connector API App in Logic App Designer. it is saying Failed to fetch swagger. Ensure you have CORS enabled on the endpoint and are calling an HTTPS endpoint. I browsed and found out for setting the Permission Level. Appsettings - > Set API Definition & CORS enabled. Authentication/Authorization - > On ->

Azure Logic Apps error While Adding API Apps

天大地大妈咪最大 提交于 2019-12-02 10:32:11
I am doing on POC for getting records from On-Premise SQL By using Logic Apps + API Apps. I have created SQL Connector in API Apps and also created Logic Apps. But when try to add the SQL Connector API App in Logic App Designer. it is saying Failed to fetch swagger. Ensure you have CORS enabled on the endpoint and are calling an HTTPS endpoint. I browsed and found out for setting the Permission Level. Appsettings - > Set API Definition & CORS enabled. Authentication/Authorization - > On -> Allow Request (noAction) Restarted the API Service. but still getting the same error. I have browsed the