...
- API receives request with token
- Authentication middleware examines the token
- Checks who issued the token (Azure ADEntra ID)
- Validates token is authentic:
- Signature is valid (proves token came from Azure AD)
- Issuer matches (correct Azure AD tenant)
- Audience matches (token is for this specific API)
- Not expired (within 1-hour lifetime)
- If all checks pass → Request continues to controller
- If any check fails → Return 401 Unauthorized
...
- Token signature: Proves it's authentic and not forged
- Issuer: Confirms it came from Azure ADEntra ID
- Audience: Ensures it's for the correct API
- Expiration: Checks it hasn't expired
...
What it does: Verifies tokens come from the correct Azure AD tenant Why it matters: Prevents tokens from other organizations' Azure AD How it works: API only accepts tokens from the configured tenant ID
...
Quick Reference
ApiService
| Property | Value |
|---|---|
| Swagger URL (Local) | http://localhost:7532/swagger |
| API Client ID | 4dad5d62-dc8c-4378-8bd0-ae736a4d73fe |
| Swagger Client ID | 84c38b43-12e4-4c26-8292-8910d79aa532 |
...
IntegrationServiceAPI
| Property | Value |
|---|---|
| Swagger URL (Local) | http://localhost:7098/swagger |
| API Client ID | bd5100ee-af63-4880-8c60-47d4207d60c1 |
| Swagger Client ID | 84c38b43-12e4-4c26-8292-8910d79aa532 |
...
Common Values
| Property | Value |
|---|---|
| Tenant ID | 6073ce8b-73f3-4df4-9b80-5e40cdc6965f |
| Token Lifetime | 1 hour |
| MFA Required | Yes |
...