-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
update api for MI auth and update client package to use either client… #2294
Conversation
… secret or MI to obtain bearer token.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It looks like this isn't configured to be have audiences currently, so we should be doing this in a consistent style with other apps e.g. typically this is done using an AzureActiveDirectoryConfiguration section in the config file. Since there are not any clients (?) of the Finance API currently we could take the opportunity to drop the client configuration from employer config, not setting up the dependency in the client library and reduce the configuration to only the MI (ApiBaseUrl and IdentifierUrl) parts from the start and not bother checking for supplied client credentials.
6c3f329
to
9b7e8d3
Compare
Kudos, SonarCloud Quality Gate passed! |
… secret or MI to obtain bearer token.