Exam AZ-203 topic 2 question 9 discussion

Actual exam question from Microsoft's AZ-203

Question #: 9
Topic #: 2

You are implementing an Azure API app that uses built-in authentication and authorization functionality.
All app actions must be associated with information about the current user.
You need to retrieve the information about the current user.
What are two ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. HTTP headers
B. environment variables
C. /.auth/me HTTP endpoint
D. /.auth/login endpoint

Show Suggested Answer

Suggested Answer: AC 🗳️
A: After App Service Authentication has been configured, users trying to access your API are prompted to sign in with their organizational account that belongs to the same Azure AD as the Azure AD application used to secure the API. After signing in, you are able to access the information about the current user through the
HttpContext.Current.User property.
C: While the server code has access to request headers, client code can access GET /.auth/me to get the same access tokens (
References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-auth-aad https://docs.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/guidance/connect-to-api-secured-with-aad

by Larry616 at Aug. 22, 2020, 7:33 a.m.

Comments

Submit Cancel

Larry616

Highly Voted 4 years, 10 months ago

Answer is correct

upvoted 5 times

...

VishwanathPathak

Most Recent 4 years, 4 months ago

Ans is correct !

upvoted 2 times

...