Before we can introduce IdentityServer to validate that the correct people and applications can access the API, we need to have an application that we can say can legitimately access the API; otherwise, the best thing we could do is to simply prevent access to the API altogether. Our client application will be built using Universal Windows Platform (UWP).
UWP is Microsoft's preferred method for building Desktop applications. WPF and WinForms are still supported (and if you've read the previous chapters, you'll see that they're getting a new lease of life). However, for new applications, it is recommended that you use UWP. In fact, XAML Islands are a way to bridge the gap between the old and the new.
Our application will ...
