Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Web-API accepts ID tokens aquired through SSO for Authorizion, expected to require access tokens

$
0
0

I have a Microsoft Teams Tab that uses SSO to access a Web-API. [Authorize] is configured as

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)                .AddJwtBearer(options =>                {                    options.Audience = Configuration["{api//endpointSetInAzure}"];                               options.Authority = "https://sts.windows.net/{tenant}/";                });

Access is granted by sending the ID token sent by the getAuthToken() method from the Teams SDK. However, according to the docs an access token should be used.

Can I aquire an access token with the ID token I received and if so, what changes do I have to make to the authorization configuration to accept this access token? (note that I do not require MS Graph permissions beyond those already included in SSO).


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>