...
- HTTP message handler that intercepts outgoing requests
- Location:
Source/EGU.PartnerPortal.ApiService/Middleware/Handler/ServiceTokenHandler.cs - Automatically gets tokens from Azure ADEntra ID
- Attaches tokens to requests going to IntegrationServiceAPI
3. Microsoft Entra ID (Azure AD Tenant)
...
Who's involved:
- Microsoft Entra ID
What Azure AD Entra ID checks:
- ✅ Does this client ID exist?
- ✅ Does the client secret match?
- ✅ Does this app have permission to call IntegrationServiceAPI?
...
- IntegrationServiceAPI receives request with token
- Authentication middleware examines the token
- Validates token is authentic and valid (using cached Azure AD Entra ID public keys - no Azure AD Entra ID call needed)
Who's involved:
- IntegrationServiceAPI
- JWT Authentication Middleware
- Azure AD Entra ID public keys (cached locally, refreshed every 30 minutes)
...
Where configured:
- Environment variables (recommendedin integrationservice container app)
appsettings.json(development only, with secrets.json)
...