Skip to content

Commit a4cf7c8

Browse files
committed
React to Copilot suggestions for V1/V2 URIs
1 parent 45830a1 commit a4cf7c8

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

aspnetcore/blazor/security/blazor-web-app-with-entra.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -140,13 +140,13 @@ The following examples use a Tenant ID of `aaaabbbb-0000-cccc-1111-dddd2222eeee`
140140

141141
If the app is registered in an ME-ID tenant, the authority should match the issuer (`iss`) of the JWT returned by the identity provider.
142142

143-
V1 STS token format:
143+
V1 STS token endpoint:
144144

145145
```csharp
146146
jwtOptions.Authority = "https://sts.windows.net/aaaabbbb-0000-cccc-1111-dddd2222eeee/";
147147
```
148148

149-
V2 STS token format:
149+
V2 STS token endpoint:
150150

151151
```csharp
152152
jwtOptions.Authority = "https://login.microsoftonline.com/aaaabbbb-0000-cccc-1111-dddd2222eeee/v2.0";
@@ -446,13 +446,13 @@ The following examples use a Tenant ID of `aaaabbbb-0000-cccc-1111-dddd2222eeee`
446446

447447
If the app is registered in an ME-ID tenant, the authority should match the issuer (`iss`) of the JWT returned by the identity provider.
448448

449-
V1 STS token format:
449+
V1 STS token endpoint:
450450

451451
```csharp
452452
jwtOptions.Authority = "https://sts.windows.net/aaaabbbb-0000-cccc-1111-dddd2222eeee/";
453453
```
454454

455-
V2 STS token format:
455+
V2 STS token endpoint:
456456

457457
```csharp
458458
jwtOptions.Authority = "https://login.microsoftonline.com/aaaabbbb-0000-cccc-1111-dddd2222eeee/v2.0";
@@ -1183,12 +1183,12 @@ We also recommend using a shared [Data Protection](xref:security/data-protection
11831183
11841184
## STS token version
11851185
1186-
There are two types of token formats, named Version 1 (V1) and Version 2 (V2). In Azure's security token services (STS), the V1 format uses the `sts.windows.net` domain as the issuer, while the V2 format uses the `login.microsoftonline.com` domain as issuer. V2 supports additional features, such as authenticating personal accounts and OpenID protocols.
1186+
There are two types of token URIs, named Version 1 (V1) and Version 2 (V2). In Azure's security token services (STS), the V1 endpoint uses the `sts.windows.net` domain as the issuer, while the V2 endpoint uses the `login.microsoftonline.com` domain as the issuer. V2 supports additional features, such as authenticating personal accounts and OpenID Connect (OIDC) protocols.
11871187
11881188
This article and its accompanying sample apps adopt V1 STS tokens. To adopt V2 tokens, make the following changes:
11891189
11901190
* The STS version must be changed in the apps' registrations in the Azure portal. Set the value of `requestedAccessTokenVersion` to `2` in the apps' manifests, both in the app's registration and the web API's (`MinimalApiJwt`) registration.
1191-
* Use the V2 authority URL format (example: `https://login.microsoftonline.com/{TENANT ID}/v2.0`, where the `{TENANT ID}` placeholder is the tenant ID).
1191+
* Use the V2 authority URL endpoint (example: `https://login.microsoftonline.com/{TENANT ID}/v2.0`, where the `{TENANT ID}` placeholder is the tenant ID).
11921192
* In the web API (`MinimalApiJwt`), explicitly validate the issuer:
11931193
11941194
```csharp

0 commit comments

Comments
 (0)