Blazor communicating with External APIs as Interactive Applications

[DevonEast]

Hi, could you give me some guidance (an addition to the existing videos would be great) on Token Management for Blazor Server Web Apps that interact with third-party APIs as interactive applications? The API is not part of the internal application, so the Identity Server plumbing is not relevant to the external API other than the Identity Name for the OAuth Token. I am unsure which packages to use and how to register the client to obtain and refresh the tokens properly.

The documentation for using the Token Management via .AddOpenIdConnect("duende", "IdentityServer", options => is reasonably clear, but I am aggregating information from 2 external APIs and not using the duende plumbing for that.

Thank you

[wcabus]

For interacting with these third-party APIs, is this using a client credentials flow (machine-to-machine) between your application and each of the third-party API? Because for this use case, we do have documentation available on [how to configure the access token management library] (https://docs.duendesoftware.com/accesstokenmanagement/advanced/client-credentials/) with custom token endpoint, client ID, etc.

If the third-party API's are relying on user access tokens, are the API's configured to trust tokens issued by your Duende IdentityServer instance(s)? Or do the users need to authenticate against another token service to gain an access token for the third-party APIs?

[DevonEast]

Hi, the users need to authenticate against another token service. In this instance, we are building a small test application to demonstrate how we can aggregate data and enable users to create updates on a remote endpoint. For the moment, it is a Blazor Server Web App using the built-in template with some basic packages and Duende.AccessTokenManagement. Initially, we want to wire it up and show what it could do. If you have some guidance for the TokenManagement configuration, that would be great

[wcabus]

There is no easy answer to this I'm afraid, as it depends on a bunch of other variables (are you federating with the other token service or not, etc.).

Unfortunately, this exceeds the scope of support. We do offer consultancy services, which are a better fit for discussing this further. For more details, feel free to contact us.

[DevonEast]

No worries! I was primarily looking for a starting point when using Blazor to eliminate any guesswork. I'll give it a try and maybe return with more specific questions later. I appreciate you taking the time to look into my question, and wishing you all the best!