c# - Whitelist for Microsoft bot connector service -


in order make bot secure possible, i'd disallow inbound traffic unless it's coming ms bot connector. there whitelist of ips/domains somewhere?

you don't need ips/domains, because microsoft bot connector sdk has security functionality built in.

just keep in mind each api controller should have [botauthentication] attribute, , should use https protocol.

[botauthentication] attribute validates each request using microsoftappid password: microsoftapppassword define in web.config file , bot connector can hit apis, else unauthorized result.


Comments

Popular posts from this blog

angular - Is it possible to get native element for formControl? -

unity3d - Rotate an object to face an opposite direction -

javascript - Why jQuery Select box change event is now working? -