How to integrate AzureAD B2C with AWS API Gateway JWT Authorizer?

แชร์
ฝัง
  • เผยแพร่เมื่อ 23 ม.ค. 2025

ความคิดเห็น • 10

  • @securityinaction1018
    @securityinaction1018  ปีที่แล้ว +1

    You can download architecture diagram file from github.com/secinaction101/azureadawsapigateway and open the file in draw.io website.
    Please subscribe to this channel for regular updates th-cam.com/channels/EEayyyCrJO94FYlzF0NLTg.html
    Thank You for the support.

  • @gayathripalanisamy2781
    @gayathripalanisamy2781 ปีที่แล้ว

    Hi I have one doubt, if the token got expire how that aws api gateway will recognize and response.

    • @securityinaction1018
      @securityinaction1018  ปีที่แล้ว

      That should be a 401 unauthorized error. Please refer this docs.aws.amazon.com/apigateway/latest/developerguide/http-api-jwt-authorizer.html.
      It checks for exp claim.

  • @gvoden
    @gvoden 9 หลายเดือนก่อน

    Hi, I don't know why but App Roles are missing from configuration for app registraiton if I am registering the app in Azure B2C.
    Any tips?

    • @securityinaction1018
      @securityinaction1018  9 หลายเดือนก่อน +1

      I am not sure. I still see in my azure developer account. If you are not seeing the option to add app roles, try manually modifying the manifest file to add app roles.

    • @gvoden
      @gvoden 9 หลายเดือนก่อน

      I modified the manifest and it worked like a charm

    • @gvoden
      @gvoden 9 หลายเดือนก่อน +1

      @@securityinaction1018 just a heads-up Microsoft's doc was updated to use the manifest vs app roles, so that has definitely changed but the rest of the steps are the same

    • @securityinaction1018
      @securityinaction1018  9 หลายเดือนก่อน +1

      Thanks for sharing this detail. When I recorded this video, I remember Microsoft docs talking about modifying manifest instead of adding through the admin console. Since the console option was available, I used it at that point of time. But, looks like modifying manifest file is the right option.

  • @pramodudakeri81
    @pramodudakeri81 ปีที่แล้ว

    This is super helpful! Thank you very much !! I was looking for something similar.
    Few queries - What is the difference between App Regitraions & AzureAD B2C? Can I use App Registration instead of AzureAD B2C?

    • @securityinaction1018
      @securityinaction1018  ปีที่แล้ว

      App registration is a configuration within Azure AD or Azure AD B2C. An app registered using App registration represents the client app that wants to use Azure AD B2C as the IdP.