如何验证试图访问Azure AD中托管的Web Api的用户名/密码？

Question

I am trying to provide basic authentication for an ASP.net Web Api hosted in Azure. I've got to the point where I have extracted the users name/password from their http basic auth request inside of the API. I am following a tutorial that says when you get to this point do this:

               //You can use Websecurity or asp.net memebrship provider to login, for
                //for he sake of keeping example simple, we used out own login functionality
                if (TheRepository.LoginStudent(userName, password))
                {
                    var currentPrincipal = new GenericPrincipal(new GenericIdentity(userName), null);
                    Thread.CurrentPrincipal = currentPrincipal;
                    return;
                }

Obviously he is verifying the credentials in some "repository" just for the example. What do I do here to verify the credentials for a user I have added in Azure AD? (Just for a quick, yes you are a user, you are authenticated, move on...) When I look at the Authorization endpoints in my application page inside of azure AD, i see the following options:

• FEDERATION METADATA DOCUMENT
• WS-FEDERATION SIGN-ON ENDPOINT
• SAML-P SIGN-ON ENDPOINT
• SAML-P SIGN-OUT ENDPOINT
• WINDOWS AZURE AD GRAPH API ENDPOINT
• OAUTH 2.0 TOKEN ENDPOINT
• OAUTH 2.0 AUTHORIZATION ENDPOINT

I tried OAuth2.0 with the auth code flow before trying this basic auth, but couldnt get it to work (possibly overkill?) because we want to be able to give users a token and allow them to immediately begin making calls without having to redirect to a browser, etc. Our users will mostly be using desktop applications...

Answer 1

Azure AD comes with a number of client libraries that make it easy to get a token and use it in web API calls. If the dev stack you are targeting is covered (eg .NET desktop, android, iOS, windows store, winphone...), you are in a great spot: just download a sample that approximate your scenario (native client) from https://github.com/AzureADSamples/ , and you'll be on your way. If the technology you are using is NOT covered, things are a bit more complicated. One thing you can do is examining the source of any of the existing libraries (they are all OSS and available on github at https://github.com/AzureAD/ ) and reproduce it in your language/stack of choice. Hope this helps! V.