angularjs - Azure Active Directory for Web API and clients using OAuth for multiple environments -
i wondering best approach handling multiple environments azure active directory. way add application webapi , clients each environment. local have localhost-webapi sign on https://localhost/webapi , client https://localhost/sample has permissions https://localhost/webapi. need same rest of environments (dev,test,prod)?
if understand question correctly have following setup:
- in aad, have single tenant there single web api registered.
- in same tenant, have multiple, equivalent client applications registered, correlate different environments have set-up on end.
this seems correct approach testing multiple environments. note register different permission scopes on web api represent permissions each environment has api.
thus have "user_impersonation_dev", "user_impersonation_test", "user_impersonation" , have each of different applications request specific permissions api. might cleaner set-up when doing development.
Comments
Post a Comment