Overview

Architecture

The solution consists of the following components, all hosted in rg-sonwincommonapi-dev:

• SonWinAPIVM - Virtual machine hosting the SonWin test database.
• SonWinCommonAPI - New API App Service.
• EGCommon - Existing App Service with the new SonWin adapter integration.
• SonWinApiVM-vnet - Virtual network connecting the services securely.

Security

• Bright authenticates to EGCommon using an internal JWT token, consistent with other EGCommon integrations.
• EGCommon communicates with SonWinCommonAPI using OAuth 2.0 authentication.
• SonWinCommonAPI connects to the SonWin SQL Server using SQL authentication over TLS, restricted to the VNet.

Application registrations are configured in Microsoft Entra ID within the same tenant as PartnerPortal, details here: Azure Deployment Guide

Sensitive configuration values are stored in Azure App Service environment variables. No connection strings or secrets are stored in Git repositories.