damienbod / OnBehalfFlowOidcDownstreamApi

This demo shows how to implement the On Behalf Of flow between an Microsoft Entra ID protected API and an API protected using OpenIddict.

On Behalf Of Flow

https://damienbod.com/2022/10/03/implement-the-on-behalf-of-flow-between-an-azure-ad-protected-api-and-an-api-protected-using-openiddict/

This demo shows how to implement the On Behalf Of flow between a Microsoft Entra ID protected API and an API protected using OpenIddict.

History

• 2023-12-09 Updated .NET 8
• 2023-11-03 Updated packages
• 2023-09-22 Updated packages
• 2023-04-28 Updated packages
• 2022-12-24 Updated to .NET 7, added Microsoft Entra ID delegated token validation

Links

https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow

https://documentation.openiddict.com/configuration/application-permissions.html

https://datatracker.ietf.org/doc/html/rfc8693

https://stackoverflow.com/questions/61536846/difference-between-jwt-bearer-and-token-exchange-grant-types

https://github.com/damienbod/OAuthGrantExchangeOidcDownstreamApi