Mgiyuk

Azure key vault private.pem read using bouncy castle [on hold] I am using a nuget package: Org.BouncyCastle, in order to sign requests with SHA256withRSA . I have the "private.pem" file uploaded in azure key vault in secrets. I have created an Azure Key Vault and uploaded the private.pem file to the secrets. I also have an azure active directory. Here, I created a new application registration. The application type chosen is "Web app/API". I gave it a name and the url. I can not find any clientSecret. From their documentation, I understood that the applicationId of the key in key vault is the clientId. Where can I find ClientSecret and how can I read (using Org.BouncyCastle) the "private.pem" file from the secrets in key vault? Here is the program.cs config snippet. SHA256withRSA var host = WebHost.CreateDefaultBuilder(args).ConfigureAppConfiguration((ctx, config) => { var buildConfig = config.Build(); var keyVaultConfigBuilder = new ...

Azure OpenID connect app prompts for offline access I've registered an application/client on https://apps.dev.microsoft.com/ requesting only the openid scope, when I try to access that application via a link like https://login.microsoftonline.com/common/oauth2/v2.0/authorize?response_type=id_token+token&client_id=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX&response_mode=form_post&redirect_uri=http://localhost:8765/test/response&scope=openid&state=123abc One of the prompts on the authorization screen is "Access your data anytime" according to https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes#offlineaccess that prompt should only be shown when requesting offline_access. What can I do to have it not prompt for "Access your data anytime"? It seems you are using implicit flow. And that must not get a refresh token so "access your data anytime" should not present in consent. Ca...