How to configure&secure django web api(back end) and angular (front end) with azure active directory?

Akhil Sambar 1

Hi All,

I am trying to integrate and secure my Django(back end) and angular(front end) app with the Azure AD. I tried following the tutorial but I am not sure how to do the same with my Django app. Pls help me

https://learn.microsoft.com/en-us/azure/app-service/tutorial-auth-aad?pivots=platform-linux

Saurabh Sharma 23,676 Reputation points Microsoft Employee

2021-02-17T01:34:19.11+00:00

@Akhil Sambar Thanks for using Microsoft Q&A !!

I do not see any specific sample, however, can you check this tutorial to configuration Azure AD Authentication with Angular. Also, to enable MS authentication to django authentication backend, you can refer to django-microsoft-auth 2.4.0 if this helps.
Akhil Sambar 1 Reputation point

2021-02-17T07:24:07.307+00:00

Thanks for your reply,

I have registered both the apps in AAD, followed this link

in the following tutorial, they did not do anything in the backend code except registering the app with AAD. Is that process is secured?
Saurabh Sharma 23,676 Reputation points Microsoft Employee

2021-02-17T20:16:26.293+00:00

@Akhil Sambar I thought you are looking to use any specific authentication mechanism for django backend so provided you django-auth 2.4.0. The tutorial enabled authentication and authorization for backend apps as well and so, Azure App service will take care of authentication and authorization part however, I haven't used it for django. Is your django api is up and running in Azure ? If not, please refer to this blog if this helps.
OR are having issues enabling authentication as mentioned in the document.
Akhil Sambar 1 Reputation point

2021-02-18T05:17:16.53+00:00
@Saurabh Sharma

I am not looking for any specific authentication mechanism for the Django backend. I want azure to take care of everything (authentication and authorization ), I don't want to write any authentication mechanism in my backend code.

Yes, my Django application is up and running in Azure and I got backend URL too. The URL is working fine, when I try to hit the URL using postman it's asking for AAD sign-in, after sign in I am able to see the data because I have permissions to get the data for my application (others unable because they don't have permissions for this application).

I am getting the below error when I am trying to access my application with a frontend URL ,

message: "IDX10511: Signature validation failed. Keys tried: '[PII is hidden]'. ↵kid: '[PII is hidden]'. ↵Exceptions caught:↵ '[PII is hidden]'.↵token: '[PII is hidden]'."

How can I solve this issue?
Saurabh Sharma 23,676 Reputation points Microsoft Employee

2021-02-19T23:41:21.3+00:00

@Akhil Sambar Got it. We need to look into your environment and collect logs to investigate your issue. I suggest you to please open a support ticket so that an identity engineer can look into this. In case you have issues creating a support ticket please send an email to azcommunity[at]microsoft[dot]com with your subscription id with this Q&A thread link and subject as "Attn: Saurabh' and I will help providing a free support ticket for you.
Saurabh Sharma 23,676 Reputation points Microsoft Employee

2021-02-23T17:28:46.12+00:00

@Akhil Sambar Please let me know if you need any help creating a support ticket.
Akhil Sambar 1 Reputation point

2021-02-24T04:40:27.68+00:00

@Saurabh Sharma Yeah, I have raised it through the portal, still working on it
Saurabh Sharma 23,676 Reputation points Microsoft Employee

2021-02-24T15:44:06.947+00:00

@Akhil Sambar Thanks for the updates.