Azure / Azure/azure-sdk-tools

[APIView] Implement Azure App Service Easy Auth to replace Azure AD authentication through custom JWT validation

Open
#12,344 1 comment 0 reactions 0 assignees View on GitHub
APIView
Dominant language
C#
Stars
135
Forks
260
Avg merge
3d 1h
Merged PRs (30d)
144

Description

APIView has been flagged for not using MISE (Microsoft Identity Service Engine) for Azure AD token validation. Our current custom JWT validation approach is non-compliant with Microsoft identity standards.

## 🎯 Solution
Migrate from custom JWT validation to Azure App Service Easy Auth, which uses MISE under the hood and ensures full compliance with Microsoft identity requirements.

## 🔍 Background
- **Current State**: Custom JWT token validation in application code
- **Compliance Issue**: Not using MISE for token validation
- **Constraint**: Cannot implement MISE directly in application
- **Solution**: Azure App Service Easy Auth (platform-level MISE integration)

Contributor guide

Open the contributing guide

Research direction

Start by locating APIView's current custom JWT validation and the Azure App Service configuration that controls authentication. Confirm how Easy Auth can replace application-level validation without direct MISE integration; done means Azure AD requests use Easy Auth and the custom validation path is no longer required.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, csharp
Domain
authentication, cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.