Skip to content

Commit eb23770

Browse files
authored
Fixed "PoP" casing and added a link to the SignedHttpRequest wiki
1 parent 7a4a59a commit eb23770

File tree

1 file changed

+5
-5
lines changed
  • 4.-Console-app-calls-web-API-with-PoP

1 file changed

+5
-5
lines changed

4.-Console-app-calls-web-API-with-PoP/README.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -243,11 +243,11 @@ Then you need to set the `accessTokenAcceptedVersion` property of the Web API t
243243

244244
### Code for the Console app
245245

246-
The focus of this tutorial is Pop (Proof of Possession).
246+
The focus of this tutorial is PoP (Proof of Possession).
247247

248-
With PoP, the programming model is a bit different than the way MSAL.NET usually works, as a Pop token contains information about the URL it's for, as well as the HTTP verb (POST, GET). Therefore to get a Pop token you will provide to MSAL an `HttpRequestMessage` and MSAL.NET will automatically populate the Authorization header of this message with a Pop token. You'll need to:
248+
With PoP, the programming model is a bit different from the way MSAL.NET usually works, as a PoP token contains information about the URL it's for, as well as the HTTP verb (POST, GET). Therefore, to get a PoP token you will provide to MSAL an `HttpRequestMessage` and MSAL.NET will automatically populate the Authorization header of this message with a PoP token. You'll need to:
249249

250-
- Instantiate a `IPublicClientApplication` specifying `WithExperimentalFeatures()` as PoP is still an experimental feature for MSAL.NET (and not implemented for all the flows, only public client applications on .NET Framework)
250+
- Instantiate a `IPublicClientApplication` specifying `WithExperimentalFeatures()` as PoP is still an experimental feature for MSAL.NET (and not implemented for all the flows, only public client applications on .NET Framework).
251251

252252
```csharp
253253
var app = PublicClientApplicationBuilder.Create(ClientId)
@@ -257,7 +257,7 @@ With PoP, the programming model is a bit different than the way MSAL.NET usually
257257
.Build();
258258
```
259259

260-
- Create an `HttpRequestMessage` passing the verb (for instance `HttpMethod.Post`) and the URL of the Web API to call
260+
- Create an `HttpRequestMessage` passing the verb (for instance `HttpMethod.Post`) and the URL of the Web API to call.
261261
```csharp
262262
HttpRequestMessage writeRequest =
263263
new HttpRequestMessage(HttpMethod.Post, new Uri(TodoListApiAddress));
@@ -306,7 +306,7 @@ public void ConfigureServices(IServiceCollection services)
306306
services.AddControllers();
307307
}
308308

309-
`AddPop`, really leverages the `SignedHttpRequest` feature in `Identity.Model` (middleware library). The incoming tokens ends-up being handled by an ASP.NET Core handler named `SignedHttpRequestAuthenticationHandler`. For details see [SignedHttpRequestAuthenticationHandler.cs](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/blob/7d999f6180ea90171b9a90ca931a0d3de2c035f5/Microsoft.Identity.Web/SignedHttpRequest/SignedHttpRequestAuthenticationHandler.cs#L44) from line 44.
309+
`AddPop()` really leverages the [`SignedHttpRequest`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/SignedHttpRequest-aka-PoP-(Proof-of-Possession))feature in `IdentityModel` (middleware library). The incoming token ends-up being handled by an ASP.NET Core handler named `SignedHttpRequestAuthenticationHandler`. For details, see [SignedHttpRequestAuthenticationHandler.cs](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/blob/7d999f6180ea90171b9a90ca931a0d3de2c035f5/Microsoft.Identity.Web/SignedHttpRequest/SignedHttpRequestAuthenticationHandler.cs#L44) from line 44.
310310

311311
### Update the `TodoListClient` to call the `TodoListService` running in Azure Web Sites
312312

0 commit comments

Comments
 (0)