API Apps

How can we improve Microsoft Azure API Apps?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

When an admin closes an idea you've voted on, you'll get your votes back from that idea.
You can remove your votes from an open idea you support.
To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".

Enter your idea

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

Make OData a first class citizen.

Apparently OData (Microsoft's flagship REST data protocol) isn't fully supported.

More info:

https://social.msdn.microsoft.com/Forums/azure/en-US/7363e392-86d8-4b60-99fd-af98e128ab06/whats-the-odata-story?forum=AzureAPIApps

quote
"If you can manually create Swagger 2.0 metadata to describe your REST API, it will work perfectly."
/quote

Assuming it's true that swagger can't do OData, I would think that fact alone would've precluded swagger as an option.

Additionally, whatever the reason swagger cannot create metadata for a WebAPI OData project should have been addressed before launch.

Regardless, please fix this.
172 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
under review · 3 comments · Flag idea as inappropriate… · Delete… · Admin →
Add ability to use API Key authentication

It would be nice to be able to protect API apps with a set of API Keys instead of requiring a user to manually log in. This would be especially helpful for backend APIs that don't require user authorization or are accessed primarily by other servers.
137 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
under review · 4 comments · Authentication · Flag idea as inappropriate… · Delete… · Admin →
Access to a populated User.Identity

It would be very valueable to have Access to a "populated" User.Identity in the Controllers. Most of the the time, at least in my apps, my Apis will present user specific Content. Having a populated User.Identity would help alot.
54 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
under review · 1 comment · Flag idea as inappropriate… · Delete… · Admin →
API Apps with AllowAnonymous

Have a mix of authentication levels for different endpoints in the underlying Web API?

API App to have access level of 'Public (authenticated)' but one of the endpoints needs to be accessible as an anonymous user. Previously I would have just applied the AllowAnonymous attribute on the method, but the gateway still intercepts and returns an unauthenticated response.

Would be great to mark a specific method as allowing anonymous and the default behaviour to respect the gateway authentication level.
17 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
1 comment · Authentication · Flag idea as inappropriate… · Delete… · Admin →
Certificate Authentication

From what I can see clients can only authenticate to API apps interactively. This, like others said, makes automated authentication difficult. It would be great to support certificate authentication, much like the Azure Management API does, i.e. https://msdn.microsoft.com/en-us/library/azure/ee460782.aspx#bk_cert
9 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
1 comment · Authentication · Flag idea as inappropriate… · Delete… · Admin →

under review · AdminAzure App Service Team (Admin, Microsoft Azure) responded

Thank you for your feedback

We are looking into this

Alex – Azure App Service Team
Support generating custom Web API from Swagger document

Support generating custom Web API from Swagger document from Visual Studio
7 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
1 comment · Flag idea as inappropriate… · Delete… · Admin →

under review · Guang Yang [MSFT] responded

Could you please explain a little bit more about your scenario?
Add support for non-OData API methods passing ODataQueryOptions parameter and returning PageResult

The DeserializeJson method in the generated code currently assumes the input can be casted as a JArray, but this fails when the response is a PageResult object.
3 votes
Vote

Sign in
prestine

Your name

Your email address
Check!

invalid email

(thinking…)

Reset

or sign in with

UserVoice password

Forgot password?

Create a password

I agree to the terms of service

Signed in as (Sign out)

Close

Close

You have left! (?) (thinking…)
under review · 0 comments · Flag idea as inappropriate… · Delete… · Admin →