Visit the post for more.

Visit the post for more.

Visit the post for more.

I’ve been streaming ‘Coding with JoeG’ on Twitch for a few months now. The general theme of the stream is teaching software development with C#. We’ve been building a contact management application to demonstrate some best practices. About two weeks ago, or so, I added an Azure Storage Blob Container to hold the images of the contacts. I did this using the way I knew how to do it using Storage Access Keys and a library, JosephGuadagno.AzureHelpers.Storage, that I wrote to make it ‘easier’ to interact with Azure Storage. While talking about the stream on Twitter, Christos, PM on the Microsoft Identity team, reached out and said I should try securing the Container/Blob with Managed Identity. I tried on the stream for a good 5 or so hours and could not get it to work. If you want to see it, check out the recording of the stream on my YouTube channel.

I’ve been working on a personal project of mine called “JosephGuadagno.NET Broadcasting”. I know a terrible name, but I’ll work on a better name when it’s ready to be launched. :smile: This application is a web application that allows users to broadcast their content to their followers. One of the components of the application is an API that allows users to create and schedule their content in the application. The application is built using ASP.NET Core, Azure, Swagger, and other components. I recently secured the application using Microsoft’s MSAL library. Now, I’m going to show you how to enable user authentication in Swagger using Microsoft Identity.

CVE-2026-109461: Microsoft Authentication Library for Node.js (@azure/msal-node) has an origin validation flaw in its authorization code flow that can leak parameters to an attacker-controlled endpoint. No exploitation confirmed. Update to 7.1.0 or later.

I’ve been working on a personal project of mine called “JosephGuadagno.NET Broadcasting”. I know a terrible name, but I’ll work on a better name when it’s ready to be launched. :smile: This application is a web application that allows users to broadcast their content to their followers. One of the components of the application is an API that allows users to create and schedule their content in the application. The application is built using ASP.NET Core, Azure, Swagger, and other components. I recently secured the application using Microsoft’s MSAL library. Now, I’m going to show you how to enable user authentication in Swagger using Microsoft Identity.

Curate Feeds | Make Collections | Customize Email Briefs

Curate Feeds | Make Collections | Customize Email Briefs

Microsoft will begin enforcing a Content Security Policy on Entra ID’s browser sign‑in pages at login.microsoftonline.com worldwide in mid–late October 2026. MSAL/API flows and External ID custom‑domain logins are not affected; test browser extensions and monitoring that inject scripts now.

Securing our applications and data is critical in this day and age. I’ve been working a lot with the new Microsoft identity platform (MSAL) library, so I decided to create a series of blog posts around working with it.

Microsoft will enforce a stricter Content Security Policy (CSP) on the browser sign‑in pages at login.microsoftonline.com starting in mid–late October 2026. Test extensions, injected scripts, and synthetic logins now; MSAL- and API‑based authentications are not affected.

Microsoft will enforce a stricter Content Security Policy (CSP) on login.microsoftonline.com starting mid–late October 2026 (act by October 19). Script‑injecting extensions, monitors, or custom tools may stop working; MSAL/API flows and External ID/custom CIAM domains are unaffected.

In this post, I’m going to walk through how you authenticate and use an API that is secured with Azure Active Directory using React Native and the Microsoft Identity library.