Azure

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last post, we used OAuth 2.0 Client Credentials flow to connect an external client (modeling our on-prem scenario). We can use

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the previous post, we looked at enabling local development by creating an Azure AD Group, assigning our user (me) to that group, and

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last post, we looked at creating the server application and corresponding Azure resources to secure it. If we try to test our

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In the last couple of posts, we looked at authentication and authorization options and picked some strategies for each. With those pieces chosen, we

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In our last post, we chose the OAuth 2.0 Client Credentials grant scheme to authenticate our APIs and daemon applications: API and daemon

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example In our last post, I walked through my real-world scenario of needing to follow Zero Trust principles in securing microservice-based APIs inside (and outside)

Posts in this series: A Case StudyDesigning Authentication SchemesAuthorizing Client ApplicationsBuilding the ServerEnabling Local DevelopmentConnecting External ClientsConnecting Azure ClientsFull example Recently, I was on a project where the company had a big push towards a "Zero Trust" security model. This concept was new to