Merge pull request #97 from Azure-Samples/jmprieur/syncMicrosoftIdentityWebFromWebAppTutorial

Fixing the config for the Web API

Author: jmprieur

2. Web API now calls Microsoft Graph/TodoListService/Startup.cs

@@ -33,8 +33,6 @@ public void ConfigureServices(IServiceCollection services)
         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
         public void Configure(IApplicationBuilder app, IHostingEnvironment env)
         {
-            app.UseSession();
-
             if (env.IsDevelopment())
             {
                 // Since IdentityModel version 5.2.1 (or since Microsoft.AspNetCore.Authentication.JwtBearer version 2.2.0),

Microsoft.Identity.Web/WebApiServiceCollectionExtensions.cs

@@ -38,20 +38,18 @@ public static IServiceCollection AddProtectedWebApi(
             this IServiceCollection services,
             IConfiguration configuration,
             X509Certificate2 tokenDecryptionCertificate = null,
-            string configSectionName = "AzureAD",
+            string configSectionName = "AzureAd",
             bool subscribeToJwtBearerMiddlewareDiagnosticsEvents = false)
         {
             services.AddAuthentication(AzureADDefaults.JwtBearerAuthenticationScheme)
                     .AddAzureADBearer(options => configuration.Bind(configSectionName, options));
+            services.Configure<AzureADOptions>(options => configuration.Bind(configSectionName, options));
 
             services.AddHttpContextAccessor();
 
             // Change the authentication configuration to accommodate the Microsoft identity platform endpoint (v2.0).
             services.Configure<JwtBearerOptions>(AzureADDefaults.JwtBearerAuthenticationScheme, options =>
             {
-                // Reinitialize the options as this has changed to JwtBearerOptions to pick configuration values for attributes unique to JwtBearerOptions
-                configuration.Bind(configSectionName, options);
-
                 // This is an Microsoft identity platform Web API
                 options.Authority += "/v2.0";