MSAL with Blazor Server and Web API

Question

Hello everyone,

we have a blazor server site with msal authentication. We now want to expose a webapi from the same site/application. Is there a way to secure the webapi with msal and aad too?

thanks in advance,
r Michael

Answer 1

As far as I know, MSAL.NET (Microsoft.Identity.Client) is an authentication library which enables you to acquire tokens from Azure AD, to access protected Web APIs (Microsoft APIs or applications registered with Azure Active Directory). MSAL.NET is available on several .NET platforms. That means MASL is a library to acquire tokens from Azure AD. If you want to protect an web api, you should refer to this article.

If you want to use MSAL to get token and access API, you could refer to this article's sample to get how to do it.

If you want to know how to use AAD protect your web api, you could refer to this article's sample.

Answer 2

I would not mix a blazor server with a webapi. The blazor server has persistent connections to each client, and a large amount of state information for each client in memory. as all the blazor logic is running on the server, you may have hi cpu if you have any number of users.

Answer 3

your authentication setup is not clear. typically with Blazor server you would be using cookie authentication and with a webapi bearer tokens. msal is client library that uses bearer tokens, so if you are using msal, then you are already are using them.

anyway just google asp.net core cookie and bearer token authentication for configuration examples.