I have a .NET API and I want to be able to secure my endpoints using JWT tokens and I have been reading a lot about Azure Apps to do this. Where you get an access_token from an azure app (which I have created in Azure Portal), and pass that into your API calls as a Bearer Token for authentication.
My end goal is to have a /token endpoint in my API which takes different scopes and then that just gets a JWT from azure token endpoint. Then I can use that token to authorize calls to my other endpoints. Everything that I have found so far online kinda has like half explanations (or Im just not understanding them)
So here is my question:
- How can I secure my .NET API using an Azure App (in Azure Portal)