You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: 4.-Console-app-calls-web-API-with-PoP/README.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -243,11 +243,11 @@ Then you need to set the `accessTokenAcceptedVersion` property of the Web API t
243
243
244
244
### Code for the Console app
245
245
246
-
The focus of this tutorial is Pop (Proof of Possession).
246
+
The focus of this tutorial is PoP (Proof of Possession).
247
247
248
-
With PoP, the programming model is a bit different than the way MSAL.NET usually works, as a Pop token contains information about the URL it's for, as well as the HTTP verb (POST, GET). Therefore to get a Pop token you will provide to MSAL an `HttpRequestMessage` and MSAL.NET will automatically populate the Authorization header of this message with a Pop token. You'll need to:
248
+
With PoP, the programming model is a bit different from the way MSAL.NET usually works, as a PoP token contains information about the URL it's for, as well as the HTTP verb (POST, GET). Therefore, to get a PoP token you will provide to MSAL an `HttpRequestMessage` and MSAL.NET will automatically populate the Authorization header of this message with a PoP token. You'll need to:
249
249
250
-
- Instantiate a `IPublicClientApplication` specifying `WithExperimentalFeatures()` as PoP is still an experimental feature for MSAL.NET (and not implemented for all the flows, only public client applications on .NET Framework)
250
+
- Instantiate a `IPublicClientApplication` specifying `WithExperimentalFeatures()` as PoP is still an experimental feature for MSAL.NET (and not implemented for all the flows, only public client applications on .NET Framework).
@@ -306,7 +306,7 @@ public void ConfigureServices(IServiceCollection services)
306
306
services.AddControllers();
307
307
}
308
308
309
-
`AddPop`, really leverages the `SignedHttpRequest`feature in `Identity.Model` (middleware library). The incoming tokens ends-up being handled by an ASP.NET Core handler named `SignedHttpRequestAuthenticationHandler`. For details see [SignedHttpRequestAuthenticationHandler.cs](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/blob/7d999f6180ea90171b9a90ca931a0d3de2c035f5/Microsoft.Identity.Web/SignedHttpRequest/SignedHttpRequestAuthenticationHandler.cs#L44) from line 44.
309
+
`AddPop()` really leverages the [`SignedHttpRequest`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/SignedHttpRequest-aka-PoP-(Proof-of-Possession))feature in `IdentityModel` (middleware library). The incoming token ends-up being handled by an ASP.NET Core handler named `SignedHttpRequestAuthenticationHandler`. For details, see [SignedHttpRequestAuthenticationHandler.cs](https://github.com/Azure-Samples/active-directory-dotnet-native-aspnetcore-v2/blob/7d999f6180ea90171b9a90ca931a0d3de2c035f5/Microsoft.Identity.Web/SignedHttpRequest/SignedHttpRequestAuthenticationHandler.cs#L44) from line 44.
310
310
311
311
### Update the `TodoListClient` to call the `TodoListService` running in Azure Web Sites
0 commit comments