c# - Whitelist for Microsoft bot connector service -
in order make bot secure possible, i'd disallow inbound traffic unless it's coming ms bot connector. there whitelist of ips/domains somewhere?
you don't need ips/domains, because microsoft bot connector sdk has security functionality built in.
just keep in mind each api controller should have [botauthentication]
attribute, , should use https protocol.
[botauthentication]
attribute validates each request using microsoftappid password: microsoftapppassword
define in web.config
file , bot connector can hit apis, else unauthorized result.
Comments
Post a Comment