C# Web API 2 & Angular - Microsoft Account Authentication

Question

I've asked the question below a couple weeks ago and I didn't get a working answer. Or maybe just not suitable for my case.

C# Microsoft Authentication Get logged user from controller

So I thought maybe I wasn't asking the right question. What i'm trying to do is create an app which has a C# Web API 2 backend and an Angular 2 frontend. Now, I want that my authentication be using people's Microsoft Account which means this will be an external authentication.

What's the best way of doing this? It would be very much appreciated if you can give a link on a blog or article that explain what I'm looking for. On my link above I've used msal.js and so far it was working fine for me until I had to get the logged user's details. It was possible from Angular's side but I want to do it in Web API so it is more secured.

Thanks in advance!

Bola · Accepted Answer · 2018-02-23 08:32:43Z

1

If you are using OpenId, you have claims that are returned when user is authorized. I am assuming you are using Azure B2C for authorization in which case you can select clams that will be returned as part of token.

For example, if you want to fetch user id:

var userId = ClaimsPrincipal.Current.FindFirst("http://schemas.microsoft.com/identity/claims/objectidentifier")?.Value;

Email:

string userName = ClaimsPrincipal.Current.Claims.Where(x => x.Type == "emails").FirstOrDefault()?.Value;

It depends what claims your authorization has returned, easiest way would be to put breakpoint on

ClaimsPrincipal.Current

and inspect it, it should return list of claims.

answered Feb 23, 2018 at 8:32

Bola

7781 gold badge7 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Jed Over a year ago

Thank you! I was able to get the logged user's info.

Jed Over a year ago

Btw, I just like to point out that in my case I had to use Where(x => x.Type == "preferred_username") to get the email of the logged in user.

Bola Over a year ago

Yeah, it depends what type of claims you get back, best is to put breakpoint and inspect what you get back.

Kevin Le · Accepted Answer · 2018-02-23 08:08:07Z

1

From your code in the previous post, it looks like you need to read from the ClaimsPrincipal instead. ClaimsPrincipal is the implementation of IPrincipal when you use OAuthBearerTokens, so of course you can get the username from CurrentPrincipal.Current.Identity

From this documentation

https://msdn.microsoft.com/en-us/library/system.security.claims.claimsprincipal(v=vs.110).aspx

https://learn.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-devquickstarts-api-dotnet

public IEnumerable<Models.Task> Get()
{
    var user = ClaimsPrincipal.Current;
    ...
}

edited Feb 23, 2018 at 8:08

answered Feb 23, 2018 at 8:01

Kevin Le

8568 silver badges17 bronze badges

Comments

Sandy Veliz · Accepted Answer · 2018-03-05 17:25:42Z

0

i do with this example

https://github.com/Azure-Samples/active-directory-b2c-javascript-angular2.4-spa

and it work well

answered Mar 5, 2018 at 17:25

Sandy Veliz

7329 silver badges16 bronze badges

Collectives™ on Stack Overflow

C# Web API 2 & Angular - Microsoft Account Authentication

3 Answers 3

3 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related