How to integrate AzureAD B2C with AWS API Gateway JWT Authorizer?

Поділитися
Вставка
  • Опубліковано 1 січ 2025

КОМЕНТАРІ • 10

  • @securityinaction1018
    @securityinaction1018  Рік тому +1

    You can download architecture diagram file from github.com/secinaction101/azureadawsapigateway and open the file in draw.io website.
    Please subscribe to this channel for regular updates ua-cam.com/channels/EEayyyCrJO94FYlzF0NLTg.html
    Thank You for the support.

  • @gayathripalanisamy2781
    @gayathripalanisamy2781 Рік тому

    Hi I have one doubt, if the token got expire how that aws api gateway will recognize and response.

    • @securityinaction1018
      @securityinaction1018  Рік тому

      That should be a 401 unauthorized error. Please refer this docs.aws.amazon.com/apigateway/latest/developerguide/http-api-jwt-authorizer.html.
      It checks for exp claim.

  • @gvoden
    @gvoden 8 місяців тому

    Hi, I don't know why but App Roles are missing from configuration for app registraiton if I am registering the app in Azure B2C.
    Any tips?

    • @securityinaction1018
      @securityinaction1018  8 місяців тому +1

      I am not sure. I still see in my azure developer account. If you are not seeing the option to add app roles, try manually modifying the manifest file to add app roles.

    • @gvoden
      @gvoden 8 місяців тому

      I modified the manifest and it worked like a charm

    • @gvoden
      @gvoden 8 місяців тому +1

      @@securityinaction1018 just a heads-up Microsoft's doc was updated to use the manifest vs app roles, so that has definitely changed but the rest of the steps are the same

    • @securityinaction1018
      @securityinaction1018  8 місяців тому +1

      Thanks for sharing this detail. When I recorded this video, I remember Microsoft docs talking about modifying manifest instead of adding through the admin console. Since the console option was available, I used it at that point of time. But, looks like modifying manifest file is the right option.

  • @pramodudakeri81
    @pramodudakeri81 Рік тому

    This is super helpful! Thank you very much !! I was looking for something similar.
    Few queries - What is the difference between App Regitraions & AzureAD B2C? Can I use App Registration instead of AzureAD B2C?

    • @securityinaction1018
      @securityinaction1018  Рік тому

      App registration is a configuration within Azure AD or Azure AD B2C. An app registered using App registration represents the client app that wants to use Azure AD B2C as the IdP.