CODEWITHSUNDEEP
angularjsasp.net-web-apiidentityserver3
Andy T
Andy T

Reputation: 9881

Pass received token from one service to another

I have this fairly straightforward use-case:

I would like to support the following scenario:

So basically, Service B can be called either directly by the Angular client or by Service A. In both cases, it must be provided a Bearer token in order to access any of the WebAPI endpoints.

From Service A, I do not know how to store the provided token so that later on when I need to use the HttpClient to call Service B I can set the Bearer header.

Upvotes: 1

Views: 2803

Answers (1)

Federico Dipuma
Federico Dipuma

Reputation: 18265

If I understood correctly, your requirement is to call the second API (Service B) as part of a single request to Service A from an authenticated user.

If this is the situation, then I believe there is no reason to store the token server-side, and you may just take the Authorization header from the current request and reuse it to call Service B.

Some code may help explain what I mean, assuming ControllerA is a Service A controller:

public class ControllerA : ApiController
{
    public async Task<IHttpActionResult> GetFromB()
    {
        var token = Request.Headers.Authorization.Parameter;

        MyModel result = null;

        using (var client = new HttpClient())
        {
            client.DefaultRequestHeaders.Authorization =
                new AuthenticationHeaderValue("Bearer", token);

            var response = await client.GetAsync("http://serviceb/controllerb/actionb");
            response.EnsureSuccessStatusCode();
            result = await response.Content.ReadAsAsync<MyModel>();
        }

        return Ok(result);
    }
}

Upvotes: 3

Related Questions