Modern Authentication with Azure Active Directory for Web Applications

Index

A

About() action, 238–239, 241, 249–250

access control

for applications, 216–219

enforcing, 82

groups, 219–221

risk levels, 59

for web APIs, 283

Access Control Service (ACS), 78–79

access delegation, 31–33

AccessToken property, 229

access tokens, 35, 256. See also tokens

claims, 263, 289–290, 292

invoking web API with, 232–251

JWT format, 271

life span, 238–239

opacity to token requestors, 72, 233

refresh tokens, 238–251. See also refresh tokens

renewing, 70–71

requests, 268–269

responses, 269–270

scope, 116. See also scopes

AccountController sign-in and sign-out logic, 104

AcquireTokenByAuthorizationCode method, 229, 244–245, 287–288

AcquireToken method, 228, 269

AcquireToken* methods, 238–239, 241, 247

AcquireTokenSilent method, 239