Hello,
Is this a correct approach or best practice?
For web application authentication, MAUI does not have special circumstances. you can refer to the following document for the guidance on authentication.
Since certification best practices are a huge part of the content, it is recommended that you refer to the following documents for the guidance on certification.
- Security, Authentication, and Authorization in ASP.NET Web API.
- Consume a REST-based web service This document explains how to request a WebAPI in MAUI.
The other issue I'm thinking about is the authentication with the external providers. How can I manage the authentication from the app for Microsoft and Google and verify that the user exists in the web application?
You can link an external account to an account in the program via the Oauth protocol.
Please refer to Microsoft identity platform and OAuth 2.0 authorization code flow for more details.
Best Regards,
Alec Liu.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.