Integration tests for web api with Azure AD

Question

I am working on a webapi webservice that is proteted by Azure Active Directory. The webservice cumminucates heavily with Office 365 (SharePoint / Yammer) based on the user that is signed in.

To test the web api endpoints I am writing an Console App that let me sign in with my AAD credentials and then calls the endpoints. It works, but looking for something to replace this way of testing the web api. Would be great if it’s more repeatable and that I don’t have to fill in my credentials each time. I was looking for a unit test project but can’t get the Azure AD sign in to work.

Any tips how to make this easier?

Answer 1

The easiest way would be to define the test runner as an application in Azure AD and have it call the API with its own client id and secret.

To do that there are a few things you would need to do:

1. Add appRoles to your API in its manifest in Azure AD. These are application permissions.
2. Define your test runner, and have it require the necessary application permissions for your API.
3. In your test runner you should now be able to get an access token with the client id and secret of the test runner, no user authentication required.

Some setup is needed for app permissions on the API side as well, authorization must also look at the role claims.

You can find an example for defining app permissions and also handling them here: http://www.dushyantgill.com/blog/2014/12/10/roles-based-access-control-in-cloud-applications-using-azure-ad/.

More on defining app permissions: https://stackoverflow.com/a/27852592/1658906.

More info on the application manifest in AAD: https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-application-manifest.

EDIT: If you must make calls on behalf of the user in the API, then this of course won't work.

In that case, I would suggest creating a user account with the necessary access for the purpose of running the tests. It would be best not to hard-code its credentials, but store them elsewhere.