Damien Pontifex
Damien Pontifex

Reputation: 1262

Azure web app gateway authentication

I have a Web App in Azure in a resource group with a Gateway in the new App Service. How can I use that gateway to manage authentication for my web app?

There is plenty of articles on protecting an API App with the gateway, but none that I have found for Web Apps (previously known as Azure Websites)

Upvotes: 4

Views: 1510

Answers (1)

mattchenderson
mattchenderson

Reputation: 1620

In this case, you would need a mechanism for validating tokens from the App Service Gateway. API Apps get their tokens validated by the gateway itself, but other sites (Web Apps & Mobile Apps) receive no such help.

For Mobile Apps (a variant of Web Apps), token validation logic is provided by the Mobile Apps Server SDK, but this is admittedly a bit much for the given scenario (worth pointing out that updates are coming which will make the Mobile Apps SDK easier to work with in any web app, though).

If you were to use the Mobile SDK in your web app, you would need to set the MS_SigningKey app setting for your site. You can get this by navigating from the gateway blade to the "Gateway Host" site and inspecting it's app settings.

Upvotes: 4

Related Questions