initial sample

[derisen]

Overview

This sample demonstrates a React & Redux single-page application allowing a user to authenticate and authorize an ASP.NET Core Web API that was protected by Azure AD to call MS Graph API on its behalf using the AAD on-behalf-of flow.

The API call to MS Graph API is made using the MS Graph SDK.

Scenario

• The sample implements an onboarding scenario where a profile is created for a new user upon first login. The profile fields are pre-populated by the available information about the user on MS Graph API.
• ProfileSPA uses MSAL.js to authenticate a user and React-Redux to store id and access tokens.
• Once the user authenticates, ProfileSPA obtains an access token from Azure Active Directory (Azure AD).
• The access token is then used to authorize the ProfileAPI to call MS Graph API on user's behalf. In order to call MS Graph API, ProfileAPI uses the MS Graph SDK.
• To protect its endpoint and accept only the authorized calls, the ProfileAPI uses MSAL.NET and Microsoft.Identity.Web.

Some screenshots:

[franva]

This is what I am looking for, thanks a lot. I will give it a try.

[TiagoBrenck]

Just an observation in the app scripts, on the SPA project, authConfig.js is receiving the app id of the API instead of the SPA. Other than this, LGTM

[kalyankrishna1]

This is not needed. The generated code in configure.ps1 does this as well

[kalyankrishna1]