This repo consists of two separate projects.
-
React JS SPA allowing users to sign-in, obtain access tokens from Azure AD B2C and calling an API with the access token authorization.
-
ASP.NET Web API application responding to authenticated API requests after validating the access token.
React JS SPA Client
The React JS SPA is based on this project which implements user sign-in, sign-out functionalities offered by the AD B2C. It uses Microsoft Authentication Library for React (msal-react) to enable user authentication using Azure Active Directory B2C. You can find more details about this in this post on my blog.
This app adds ability to obtain access token (and ID token) from Azure AD B2C and then call a backend API usng the token as means of authorization.
Web API
The Web API is a standard ASP.NET 5 web API template project created with dotnet commandline. It is then extended with Azure AD B2C specific changes and configuration.
The API project includes one API controller serving random weather forecast data. With the AD B2C authorization configured, the API endpoints return data only when the request is authorized with a valid access token obtained from AD B2C.