Cloud based application - hosting static HTML content "privately"

Question

Hi,

We have a cloud based application that supports multiple clients within different sub-domains.

We want to add a "feature" that allows our clients to upload HTML content (for example: e-learning content exported from Articulate). This content can only be accessed by users who are authorised (authenticated by our application & within the correct sub-domain). This HTML content is static, but will contain javascript, CSS and other assets.

We currently utilise private Azure Blob Storage along with generating SAS tokens to allow authorised users to access those resources; this method won't work for the HTML content, as the HTML content will require public static URLs to access it's resources.

This is what we have tried so far:

Place the index page in a private blob and the rest of the content in a public blob & update all the file references in the index page with the public blob URL's. We then create an SAS token to access the index page. This method can work in some cases, but it has issues if the resources reference the index page, or URL's contain fragments.

Would anyone know of a secure way to achieve our goal? thanks!

Answer 1

@Joel
Currently hosting a static website privately via blob storage is not a supported feature. After reviewing your use-case I believe you might be better suited for hosting this on Azure Static Web Apps. You can setup to restrict access to your web app so that it is only available on your private network. Review the quickstart documentation to see if this might be a suitable alternative for your application.

Hope this helps! Let us know if you have more questions and we will do our best to assist.

-------------------------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.