https://github.com/damienbod/onbehalfflowoidcdownstreamapi

This demo shows how to implement the On Behalf Of flow between an Microsoft Entra ID protected API and an API protected using OpenIddict.
https://github.com/damienbod/onbehalfflowoidcdownstreamapi

aad access-token aspnetcore azuread bearer dotnet entra jwt oauth oauth2 obo openiddict token-exchange

Last synced: 3 months ago
JSON representation

This demo shows how to implement the On Behalf Of flow between an Microsoft Entra ID protected API and an API protected using OpenIddict.

• Host: GitHub
• URL: https://github.com/damienbod/onbehalfflowoidcdownstreamapi
• Owner: damienbod
• License: mit
• Created: 2022-09-25T06:07:23.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-10-07T10:07:29.000Z (4 months ago)
• Last Synced: 2024-11-01T13:42:09.373Z (3 months ago)
• Topics: aad, access-token, aspnetcore, azuread, bearer, dotnet, entra, jwt, oauth, oauth2, obo, openiddict, token-exchange
• Language: C#
• Homepage: https://damienbod.com/2022/10/03/implement-the-on-behalf-of-flow-between-an-azure-ad-protected-api-and-an-api-protected-using-openiddict/
• Size: 1.03 MB
• Stars: 9
• Watchers: 3
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# On Behalf Of Flow 

[![.NET](https://github.com/damienbod/OnBehalfFlowOidcDownstreamApi/actions/workflows/dotnet.yml/badge.svg)](https://github.com/damienbod/OnBehalfFlowOidcDownstreamApi/actions/workflows/dotnet.yml)

https://damienbod.com/2022/10/03/implement-the-on-behalf-of-flow-between-an-azure-ad-protected-api-and-an-api-protected-using-openiddict/

This demo shows how to implement the On Behalf Of flow between a Microsoft Entra ID protected API and an API protected using OpenIddict.

![OBO](https://github.com/damienbod/OnBehalfFlowOidcDownstreamApi/blob/main/images/obo_aad_openiddict_01.png)

## History

- 2024-11-01 Updated packages

- 2024-10-07 Updated packages

- 2024-05-08 Updated packages

- 2023-12-09 Updated .NET 8

- 2023-11-03 Updated packages

- 2023-09-22 Updated packages

- 2023-04-28 Updated packages

- 2022-12-24 Updated to .NET 7, added Microsoft Entra ID delegated token validation

## Links

https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow

https://documentation.openiddict.com/configuration/application-permissions.html

https://datatracker.ietf.org/doc/html/rfc8693

https://stackoverflow.com/questions/61536846/difference-between-jwt-bearer-and-token-exchange-grant-types

https://github.com/damienbod/OAuthGrantExchangeOidcDownstreamApi