Sample app that authenticates Azure AD using PKCE flow using java spring boot. (later probably Python as well)
Budget: $30 – $250 USD
Need proof of concept app written in java spring boot, that connects to Azure AD.
Azure must be configured as Web, Confidential Client and Secure with SSL Certificate. This means that no client_secret will be used and should not existing on the app registration under Certificates & Secrets page.
Requirements:
- Have your own Azure account
- Create app registration for this test
So you have to create this app configuration, under your Azure account (u can use public/free account), similar to steps on How to use the Spring Boot Starter for Azure Active Directory | Microsoft Learn, but keep in mind that you need a SSL certificate and private key that you can create it based on How to Generate a Self-Signed Certificate and Private Key using OpenSSL – GSX Help Center or whatever method you are used to.
For the request on Azure Authorize and Token endpoints, you will need PKCE challenge and verifier, so add it in the code, you can check if it works here Online PKCE Generator Tool (tonyxu-io.github.io).
Obliviously, this assignment is for devs that did this task before (or that even have the code in hand), otherwise it will not be worth you time (believe me), specially if you have to start from scratch. You can use samples from Internet too.
Concept of Completion and funds release:
You will run the app, and have three buttons Authorize, Token and Renew.
On Authorize, you display the Code_Challenge, Code_Verifier and returning Code(Bearer).
On Token, you display JWT signed by certificate/private key, and return Token(JWT).
On Renew, you display current JWT, and the new returned Token(JWT).
You will run the app twice, sharing your screen, or I share mine and you keep the code in yours.
- First run, you click buttons and I check for values, you copy and paste the value from the screen and drop them on the chat, I quickly validate them, Using PKCE generator and JSON Web Tokens - jwt.io
- Second run, you run in debug mode, put breakpoints and show me quickly the value that are going into each request.
- Code is zip it and send it over.
As usual, ask questions before bidding, and if you are a beginner this is not for you. I will have beginner tasks later, so don’t get burned for this.
Happy holidays.
Azure must be configured as Web, Confidential Client and Secure with SSL Certificate. This means that no client_secret will be used and should not existing on the app registration under Certificates & Secrets page.
Requirements:
- Have your own Azure account
- Create app registration for this test
So you have to create this app configuration, under your Azure account (u can use public/free account), similar to steps on How to use the Spring Boot Starter for Azure Active Directory | Microsoft Learn, but keep in mind that you need a SSL certificate and private key that you can create it based on How to Generate a Self-Signed Certificate and Private Key using OpenSSL – GSX Help Center or whatever method you are used to.
For the request on Azure Authorize and Token endpoints, you will need PKCE challenge and verifier, so add it in the code, you can check if it works here Online PKCE Generator Tool (tonyxu-io.github.io).
Obliviously, this assignment is for devs that did this task before (or that even have the code in hand), otherwise it will not be worth you time (believe me), specially if you have to start from scratch. You can use samples from Internet too.
Concept of Completion and funds release:
You will run the app, and have three buttons Authorize, Token and Renew.
On Authorize, you display the Code_Challenge, Code_Verifier and returning Code(Bearer).
On Token, you display JWT signed by certificate/private key, and return Token(JWT).
On Renew, you display current JWT, and the new returned Token(JWT).
You will run the app twice, sharing your screen, or I share mine and you keep the code in yours.
- First run, you click buttons and I check for values, you copy and paste the value from the screen and drop them on the chat, I quickly validate them, Using PKCE generator and JSON Web Tokens - jwt.io
- Second run, you run in debug mode, put breakpoints and show me quickly the value that are going into each request.
- Code is zip it and send it over.
As usual, ask questions before bidding, and if you are a beginner this is not for you. I will have beginner tasks later, so don’t get burned for this.
Happy holidays.