Static Web App和App Service之间使用相同的Azure AD认证

Question

我有一个 Azure Static Web 应用程序设置，它配置了 Z3A580F1422036763F1FZFBC 身份验证。 为此，我在 Azure Active Directory 中注册了一个应用程序。 这是 100% 的工作。

我现在有一个 Azure 应用程序服务，其中包含一个 Flask Python ZDB974238714CA8DE63ZF.ACE1 其中一些 API 由 Static Web 应用程序调用。

Is it possible to use the same Azure Active Directory authentication for the App Service so that once the user logs in to the Static Web App, the API can then "see" that they are authenticated and the identity of the authenticated user?

在应用服务中，有一个身份验证菜单项，我尝试指向我在 Azure Active Directory 中注册的同一个应用。 但是，每次 Static Web 应用程序调用 API 时，我都会得到 403，即使用户已经登录。

我觉得我只是在这个过程中遗漏了一些东西，某种桥梁可以通过 Static Web App 到 App Service 的身份验证。

Answer 1

• You are doing it the wrong way, ie, you should link the Azure web app service in the Azure static app first as shown below and then configure the authentication for Azure AD correctly in the Azure static web app as described in the documentation link given below. This will ensure that your Azure static web app is added as an authentication provider in the Azure web app service and the respective Azure AD identity which is supposed to authenticate to the Azure static web app is also allowed to login to the Azure web app service later You are doing it the wrong way, ie, you should link the Azure web app service in the Azure static app first as shown below and then configure the authentication for Azure AD correctly in the Azure static web app as described in the documentation link given below. This will ensure that your Azure static web app is added as an authentication provider in the Azure web app service and the respective Azure AD identity which is supposed to authenticate to the Azure static web app is also allowed to login to the Azure web app service later .

Azure static 应用程序链接到 Azure Z2567A5EC9705EB1AC2C984033E 应用程序：

Azure AD 身份提供者在 Azure static Z2567A5EC9705EB7AC2C98403 应用程序中的配置：

https://docs.microsoft.com/en-us/azure/static-web-apps/authentication-authorization?tabs=invitations

Once the above said is done, you will be able to provide authentication to the Azure web app service through the logged in user via Azure static web app .