How Device Code Flow works in Azure AD
Explains the OAuth Device Code Flow in Azure AD for authenticating apps without a web browser, including how it works and a C# example.
Joonas Westlin is a software developer at Zure and an Azure MVP specializing in building cloud applications on Microsoft Azure. He focuses on ASP.NET Core, TypeScript, and identity solutions using Azure Active Directory.
91 articles from this blog
Explains the OAuth Device Code Flow in Azure AD for authenticating apps without a web browser, including how it works and a C# example.
Explains how to identify and filter out Application Insights availability ping test requests in an ASP.NET Core app by checking for specific HTTP headers.
Explains the purpose and benefits of the ActionResult<T> type in ASP.NET Core 2.1 for improving API action return types and documentation.
A tutorial on implementing a custom HTTP Basic authentication scheme within the ASP.NET Core 2.0 authentication framework.
A technical guide on implementing Azure AD's On-Behalf-Of token flow in an ASP.NET Core 2.0 API to securely call downstream services like Microsoft Graph.
A tutorial on implementing Redis as a distributed cache for session storage in ASP.NET Core applications to ensure data persistence.
Explains the Azure AD error AADSTS90094, detailing why it occurs when admin consent is missing for app permissions and how to resolve it.
A tutorial on adding custom user claims during authentication in ASP.NET Core 2.0, covering both OpenID Connect and JWT Bearer scenarios.
A guide to defining delegated and application permissions (scopes and roles) for an app in Azure Active Directory using the application manifest.
A guide to applying authorization globally in ASP.NET Core, covering single-policy and multi-policy scenarios using filters and conventions.
A guide to implementing custom error pages for 404s and exceptions in ASP.NET MVC Core, including telemetry integration.
Explains how to programmatically discover all controller actions and Razor Pages in an ASP.NET MVC Core application using IActionDescriptorCollectionProvider.
Explains Azure AD Managed Service Identity (MSI) for secure authentication without managing secrets in code, with a focus on ASP.NET Core.
A technical guide on programmatically checking if a URL maps to a controller action in ASP.NET MVC Core, including code examples.
A comprehensive guide to implementing localization in ASP.NET Core 2.0, covering setup, configuration, and resource management.
Explains key configuration changes in ASP.NET Core 2.0, including moving config to Program.cs and using WebHost.CreateDefaultBuilder.
A technical guide on implementing Azure Active Directory authentication in ASP.NET Core 2.0, covering setup and configuration changes.
A comprehensive guide to dependency injection in ASP.NET Core, covering service lifetimes, registration, and best practices for testable code.
A guide to implementing Content Security Policy (CSP) headers in ASP.NET Core applications to control resource loading and enhance security.
A guide to implementing HTTP Public Key Pinning (HPKP) for enhanced security in ASP.NET Core applications, covering benefits and risks.