web api security using token passed from angular

hari krk

6y753Learn iOS Programming

I am having a project where UI is in Angular and backed is Web API using .Net 4.6

Both are hosted in Azuer as two different app services

Angular UI, authenticates using Microsoft Azure AD SSO authentication.

after authetication, it gets the token and sends the token in header to api also as Bearer token

I need to use this token to authenticate in api side if call is from same angular UI only.

Any idea how can i set this up in UI. I tried owin, but not able to solve it.

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

hari krk6y ago
Yes. I am using Azure AD for authentication. Below is further explanation

I am having an Angular application which directly authenticate with Microsoft Azure AD SSO login. After this is authenticated, I am passing this JWT token got after the login as bearer token in the header for my API calls. API is web api created in .Net 4.6 I want to get this token authenticated in web API. Tried multiple things mainly using owin. Created startup.cs class and removed global.asax from the project. But didnt get a clear way to do this. Can anyone help on this?
0
Laxmidhar Sahoo6y ago
hi
One of my colic using that .he is in leave after one day I may look in it .
Are you using active directory ?
0
hari krk6y ago
thank you Laxidhar.
can you put some light on how to do in API also. ?
0
Laxmidhar Sahoo6y ago
1. Hi
2. 1- store the key in a global variable in javascript ,tat define in layout page
3. and access it in home controller of the angular UI .Then brodcast it
6. function getSettings(requestData) {
7. return {
8. url: requestData.url,
9. dataType: requestData.dataType || "json",
10. data: requestData.data || {},
11. headers: requestData.headers || {
12. "accept": "application/json; charset=utf-8",
13. 'Authorization': 'Bearer ' + requestData.token
14. },
15. async: requestData.async || "false",
16. cache: requestData.cache || "false",
17. success: requestData.success || {},
18. error: requestData.error || {},
19. complete: requestData.complete || {},
20. fail: requestData.fail || {}
21. };
22. }
26. function calling()
27. {
28. var requestData = {
29. url: 'API end point',
30. data: Your Request Data,
31. token: Your Token
32. };
34. var settings = getSettings(requestData);
35. settings.method = "POST"; //("Your request type")
36. return $http(settings);
38. }
+1