109public static EntraIdApi MicrosoftGraph { get; } = new( 116public static EntraIdApi AzureResourceManager { get; } = new( 123public static EntraIdApi AzureStorage { get; } = new( 195return new(displayName, Guid.Parse(applicationId).ToString("D"), resourceUri, baseUrl, s_noPermissions, s_noPermissions, hasCatalog: false);

109public static EntraIdApi MicrosoftGraph { get; } = new( 116public static EntraIdApi AzureResourceManager { get; } = new( 123public static EntraIdApi AzureStorage { get; } = new( 172public static EntraIdApi FromApplicationId(string displayName, string applicationId, string resourceUri, string? baseUrl = null)

23private EntraIdApiAccess(EntraIdApplicationResource? application, EntraIdApi? api) 31public static EntraIdApiAccess ForApi(EntraIdApi api) => new(null, api); 35public EntraIdApi? Api { get; } 45public bool IsFor(EntraIdApi api) => Api is not null && string.Equals(Api.ApplicationId, api.ApplicationId, StringComparison.OrdinalIgnoreCase); 98: EntraIdApi.CreateScope(Api!.ResourceUri, scope);

849string uri => ReferenceExpression.Create($"{EntraIdApi.CreateScope(uri, scope)}"),

1791/// <param name="api">The API, for example <see cref="EntraIdApi.MicrosoftGraph"/>.</param> 1799/// <see cref="WithAdminConsent(IResourceBuilder{EntraIdApplicationResource}, EntraIdApi, EntraIdApiPermission[])"/> to opt in to consent. 1815EntraIdApi api, 1887/// <param name="api">The API, for example <see cref="EntraIdApi.MicrosoftGraph"/>.</param> 1888/// <param name="permissions">Permissions already declared with <see cref="WithApiPermissions(IResourceBuilder{EntraIdApplicationResource}, EntraIdApi, EntraIdApiPermission[])"/>.</param> 1924EntraIdApi api,

85.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")) 86.WithAdminConsent(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")); 278EntraIdApi.MicrosoftGraph, 284web.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Application("Custom.Role", new Guid("e1fe6dd8-ba31-4d61-89e7-88639da4683d"))); 291var contoso = EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://contoso"); 292var profileOnly = EntraIdApi.FromApplicationId("Profile API", "11110000-aaaa-7777-bbbb-6666cccc5555", "api://profile"); 294.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("openid"), EntraIdApiPermission.Delegated("User.Read")) 312var graph = EntraIdApi.FromApplicationId( 314var contoso = EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://contoso"); 336() => EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://contoso", baseUrl)); 349EntraIdApi.MicrosoftGraph, 372EntraIdApi.MicrosoftGraph, 378EntraIdApi.MicrosoftGraph, 513.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")) 514.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("user.read"), EntraIdApiPermission.Delegated("User.Read", new Guid("e1fe6dd8-ba31-4d61-89e7-88639da4683d"))); 527EntraIdApi.MicrosoftGraph, 544web.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("Not.A.Permission"))); 550web.WithApiPermissions(EntraIdApi.AzureResourceManager, EntraIdApiPermission.Application("user_impersonation"))); 553web.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read", Guid.NewGuid()))); 556Assert.Throws<ArgumentException>(() => web.WithApiPermissions(EntraIdApi.MicrosoftGraph)); 567.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Application("Mail.Send", mailSend)) 569EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://contoso"), 572EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://contoso"), 581var custom = EntraIdApi.FromApplicationId("Contoso API", "99998888-AAAA-7777-bbbb-6666cccc5555", "api://contoso"); 584Assert.Throws<ArgumentException>(() => EntraIdApi.FromApplicationId("Contoso API", "not-a-guid", "api://contoso")); 595Assert.Equal("00000003-0000-0000-c000-000000000000", EntraIdApi.MicrosoftGraph.ApplicationId); 596Assert.Equal("797f4846-ba00-4fd7-ba43-dac1f8f63013", EntraIdApi.AzureResourceManager.ApplicationId); 597Assert.Equal("e406a681-f3d4-42a8-90b6-c2b029497af1", EntraIdApi.AzureStorage.ApplicationId); 606.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")); 609Assert.Throws<InvalidOperationException>(() => web.WithAdminConsent(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read.All"))); 612Assert.Throws<InvalidOperationException>(() => web.WithAdminConsent(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Application("Mail.Read"))); 722.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")); 775EntraIdApi.MicrosoftGraph, 780.WithApiPermissions(EntraIdApi.AzureStorage, EntraIdApiPermission.Delegated("user_impersonation")); 877existing.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")); 878existing.WithApiPermissions(EntraIdApi.AzureStorage, EntraIdApiPermission.Delegated("user_impersonation")); 948Assert.Throws<ArgumentException>(() => EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", uri)); 955var contoso = EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "https://contoso.onmicrosoft.com/orders"); 1001var first = EntraIdApi.FromApplicationId("My API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://my-api"); 1002var second = EntraIdApi.FromApplicationId("MyAPI", "11110000-aaaa-7777-bbbb-6666cccc5555", "api://my-api-2"); 1018var first = EntraIdApi.FromApplicationId("My API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://my-api"); 1019var second = EntraIdApi.FromApplicationId("Other API", "11110000-aaaa-7777-bbbb-6666cccc5555", "https://contoso.onmicrosoft.com/other/"); 1172.WithApiPermissions(EntraIdApi.MicrosoftGraph, EntraIdApiPermission.Delegated("User.Read")); 1211var one = EntraIdApi.FromApplicationId("Contoso API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://one"); 1212var two = EntraIdApi.FromApplicationId("Contoso API", "11110000-aaaa-7777-bbbb-6666cccc5555", "api://two"); 1233var a = EntraIdApi.FromApplicationId("a", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://a"); 1234var aB = EntraIdApi.FromApplicationId("aB", "11110000-aaaa-7777-bbbb-6666cccc5555", "api://ab"); 1255var digits = EntraIdApi.FromApplicationId("2FA API", "99998888-aaaa-7777-bbbb-6666cccc5555", "api://2fa"); 1256var punctuation = EntraIdApi.FromApplicationId("---", "11110000-aaaa-7777-bbbb-6666cccc5555", "api://dashes");