Azure App Service provides built-in authentication and authorization support. This makes it easy to sign in users and access data, with minimal or no code changes in your web apps, APIs, Azure Functions, and mobile backends. It also extracts the need to have deeper knowledge about security, including encryption, JSON web tokens, federation, and more. This is all handled for you by Azure. However, you are not required to use App Service for authentication and authorization. You can also use security features that come with other web frameworks or write your own utilities.
The App Service authentication and authorization module runs in the same sandbox as your application code. When it is enabled, it will handle all incoming HTTP requests before they are handled by the application code.
This module handles the following things for your app:
- Authenticates users with the specified provider
- Validates, stores, and refreshes tokens
- Manages the...
