Security Considerations

⚠️ Documentation is moving ⚠️
With v4, documentation is moving into the main repo see the faq to get started, or the Discussion tab.

Security Responsibilities

This is open-source software and delivered as a Proof-of-concept. Please consider which security approaches is appropriate for your use case.

Current Implementation

The TinyBlazorAdmin is secured using role management, but the backend function is currently open to allow for users to choose their appropriate authentication option.

Basic Security Approaches

See Securing Azure Functions for the possibilities for securing the Azure Function backend. One of the most straightforward is using function keys.

Including the option to secure with function keys as a config setting is on our backlog.

Advanced Security Approaches

Corporate clients will likely want to set up other options like using Managed Identities or fronting with APIM.