Skip to content

Latest commit

 

History

History
47 lines (27 loc) · 2.2 KB

README.md

File metadata and controls

47 lines (27 loc) · 2.2 KB
Raw

ASP.NET web app (Azure DevOps OAuth sample)

This sample shows how to prompt a user to authorize a cloud service that can call APIs on Azure DevOps on behalf of the user.

To learn more about OAuth in Azure DevOps, see Authorize access to Azure DevOps with OAuth 2.0

How to setup

These instructions assume you will be deploying this sample app to an Azure web app. To learn more and to get started, visit Get started with Azure Web Apps and ASP.NET.

  1. Register an OAuth client app in Azure DevOps (https://app.vsaex.visualstudio.com/app/register)

  2. Clone this repository and open the solution OAuthWebSample\OAuthWebSample.sln in Visual Studio 2015 or later

  3. Update the following settings in web.config to match the values in the app you just registered:

    • ClientAppID
    • ClientAppSecret (use the "Client Secret" shown on the Azure DevOps Application Settings page, not the App Secret)
    • Scope (space separated)
    • CallbackUrl

  4. Build the solution (this will trigger a NuGet package restore, which will pull in all dependencies of the project)

  5. Publish the app to Azure

Run the sample

  1. Navigate to your app (https://yoursite.azurewebsites.net)

  2. Confirm your App ID, scope, and callback URL are displayed properly app

  3. Click Authorize

  4. Sign in to Azure DevOps (if prompted)

  5. Review and accept the authorization request

If everything is setup properly, Azure DevOps will issue an access token and refresh token and both values will be displayed. You should keep these values secret. Also a new authorization will appear in your profile page.

With the access token you can invoke Azure DevOps REST APIs by providing the access token in the Authorization header.

Authorization: Bearer {access token}