pkg
AzureAD/Microsoft.Identity.Web.Azurev4.4.0
✓ Verified.NET FW4.6.2.NET FW4.7.2.NET 8.0.NET 9.0
This package enables ASP.NET Core web apps and web APIs to use the Azure SDKs with the Microsoft identity platform (formerly Azure AD v2.0)
Get Started
$ dotnet add package Microsoft.Identity.Web.AzureReadme
Microsoft.Identity.Web.Azure
This package enables ASP.NET Core web apps and web APIs to use the Azure SDKs with the Microsoft identity platform (formerly Azure AD v2.0).
Features
- MicrosoftIdentityTokenCredential - Provides seamless integration between Microsoft.Identity.Web and Azure SDK's TokenCredential, enabling your application to use Azure services with Microsoft Entra ID (formerly Azure Active Directory) authentication.
- Supports both user delegated and application permission scenarios
- Works with the standard Azure SDK authentication flow
- Is Scoped (injected for each request, which means credendials can be different at each request.)
Installation
dotnet add package Microsoft.Identity.Web.Azure
## Usage
### Basic setup
1. Register the Azure Token Credential in your service collection:
```cshap
// In your Startup.cs or Program.cs
using Azure.Storage.Blobs;
using Microsoft.Extensions.Azure;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Identity.Web;
public void ConfigureServices(IServiceCollection services)
{
// Register Microsoft Identity Web
services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
.AddMicrosoftIdentityWebAppAuthentication(Configuration)
.EnableTokenAcquisitionToCallDownstreamApi();
services.AddInMemoryTokenCaches() // or others
// Add the Azure Token Credential
services.AddMicrosoftIdentityAzureTokenCredential();
}
Using with Azure SDK clients
Once registered, the MicrosoftIdentityAzureTokenCredential can be injected directly into your controllers or services: // Direct injection into a controller or Razor Page
[Authorize]
public class BlobController : Controller
{
private readonly MicrosoftIdentityTokenCredential _tokenCredential;
public BlobController(
MicrosoftIdentityTokenCredential tokenCredential)
{
_tokenCredential = tokenCredential;
}
[HttpGet]
public async Task<IActionResult> DownloadBlob(string containerName, string blobName)
{
try
{
// If you want to have get a blob on behalf of the app itself.
_tokenCredential.Options.RequestAppToken = true;
BlobContainerClient containerClient = new BlobContainerClient(new Uri($"https://storageaccountname.blob.core.windows.net/{containername}"), _microsoftIdentityTokenCredential);
var blobClient = containerClient.GetBlobClient(blobName);
// Check if blob exists
if (!await blobClient.ExistsAsync())
{
return NotFound($"Blob '{blobName}' not found in container '{containerName}'");
}
// Download the blob content
var response = await blobClient.DownloadContentAsync();
string content = response.Value.Content.ToString();
return Content(content);
}
catch (Exception ex)
{
return StatusCode(500, $"Error accessing blob: {ex.Message}");
}
}