ASP.NET Core Web API + Azure AD Authentication

Question

I need some help with implementing authorization infrastructure for my application.

I have a Angular SPA application that works with a Web API. This Web API in turns uses another Web API to serve its request. So, I have totally 2 Web APIs and a Angular SPA application.

I want the users of the Angular SPA application to be authenticated by our Azure AD account, and then share this token with other two Web APIs to authenticate the requests.

Please advise how to go about it, any thoughts are much appreciated.

Answer 1

So the flow looks like:

1.Sign-in the user in the SPA application.

2.Acquire a token to A Web API and call it.

3.A Web API then calls B Web API.

Take a look at this sample . It uses the On-Befalf-Of flow which applies to your scenario.