Secure an ASP.NET Core Blazor WebAssembly standalone app with Microsoft Entra ID
Quickstart: Call a web API that is protected by the Microsoft identity platform
A web API that calls web APIs: App registration
Make Web API an authorized client application to Web API 2.
Create client secret for src/WebApi
in user secrets:
CLIENT_SECRET="..."
dotnet user-secrets set "AzureAd:ClientCredentials:0:ClientSecret" "$CLIENT_SECRET" --project src/WebApi