microsoft-identity-web | Helps creating protected web apps and web APIs | Azure library

I have an API that I need to secure with AzureAD so that it can use SSO.

The API has a Swagger UI, so I have (after reading many, many tutorials/explanations/issues):

• Created an App Registration in Azure
• Created a scope for my API
• Added my scope as an API permission
• Changed the "accessTokenAcceptedVersion" to 2 in the manifest
• Set up Swagger to use the OAuth2 flow with appropriate config and values
• Set up the API using Microsoft.Identity.Web and added configuration to allow sign-in to a single tenant

as per: https://github.com/AzureAD/microsoft-identity-web/wiki/web-apis, setup in the API is as follows:

I've been struggling with the Func that I attach to OnTokenValidated not doing what it should be.

After lots of trying different things:

I'm working on figuring out how to use Microsoft Graph API in a ASP.NET Core 3.1 Razor Pages application. I found this guide and got most of it to work (along with retrieving a token) until I realized I need to get access to the API without a user.

At the moment, I am stuck because I am not able to retrieve a token using the ITokenAcquisition GetAccessTokenForAppAsync method. It keeps resulting in a NullReferenceException. I don't know if my startup setup is wrong or what, but I can't figure it out.

System.NullReferenceException: 'Object reference not set to an instance of an object.'

I'm aware of the Get access without a user guide which I understand and can get to work, but I specifically want to use GetAccessTokenForAppAsync method because it will manage refreshing tokens for me. Otherwise, I'd have to keep querying for a new token with every API call and constantly generating valid tokens seems like a bad idea.

Startup.cs ConfigureServices method:

I'm using Azure B2C, I would like to use Google to sign in users. I would like to do something like this in my asp.net core page to achieve it:

I have a curl script which requests a new access token from Azure AD. I need it to return a claim of some kind for my API, either a role or a scope either will work.

I can get an access token however its not returning a role claim or a scope or anything of that nature.

When used in the web API

I have created a web app in .net core 3.1 and authenticate users against Azure AD. After successful authentication I'm fetching user information from Microsoft Graph API. All are working fine locally but whenever I'm publishing it to Azure, it is also working fine for the users who are logged In at the first time but getting exception if the users already logged In (Previous Logged In) into the web app. This application is also working fine if the user logged Out who is already logged In and logged In again. If the user already logged In and trying to get user details through Microsoft Graph, getting exception:

How do I increase token lifetime for daemon app on Azure B2C? I have problem finding correct setting on Azure Portal.

I am setting up Azure B2C security. Everything is fine, I have daemon app which acquires token, saves it to cache, and calls API which check tokens validity. Subsequent calls check token lifetime and if expired, silently gets new one.

I have a requirement that token lifetime has to be more than default 1 hour.

I have found how to increase token life time for user-flow under Azure AD B2C | User flows / policy/properties.

But daemon apps don't use user flows. Is there another place to configure this? Is it somewhere in manifest and have I missed it? Do I not understand deamon apps and client credentials flow correctly?

I am using recommended libraries described here https://github.com/AzureAD/microsoft-identity-web/wiki .

Should I be using OpenIdConnectDefaults.AuthenticationScheme when authenticating with Azure ADFS?

I have an ASP.NET Core application that has recently been upgraded from 3.1 to .NET 5.

Previously, it had been using the following NuGet package:

I'm trying to use my own MSAL code to work together. Developed with .NET Core 5 MVC. I have similar problem as I found in below link. But I just don't know how to make it work with the proposed answer. Or in other words, I'm still confuse how this integration is done.

[It is mandatory to use the login component in order to use the other components]It is mandatory to use the login component in order to use the other components

[Quickstart for MSAL JS]https://github.com/microsoftgraph/microsoft-graph-toolkit/blob/main/samples/examples/simple-provider.html

I also have read following article too: [Simple Provider Example]https://github.com/microsoftgraph/microsoft-graph-toolkit/blob/main/samples/examples/simple-provider.html

[A lap around microsoft graph toolkit day 7]https://developer.microsoft.com/en-us/office/blogs/a-lap-around-microsoft-graph-toolkit-day-7-microsoft-graph-toolkit-providers/

is there someone can pointing to me more details explanation about how to archive this.

Can someone explains further below response further. How to do it. Where should I place the code and how to return AccessToken to SimpleProvider?

Edited:

Update my question to be more precise to what I want besides on top of the question. Below is the code I used in Startup.cs to automatically trigger pop up screen when user using the web app. When using the sample provided, it is always cannot get access token received or userid data. Question 2: How to save or store token received in memory or cache or cookies for later use by ProxyController and its classes.

//Sign in link under _layouts.aspx
Sign in