How Azure Protects a Mobile App: The Full Request Flow, Layer by Layer
Front Door, your API, Microsoft Entra ID, authorization and a private database — the five layers that stand between a mobile app and its data on Azure.
22 articles on .NET, Azure, and AI engineering, newest first.
Front Door, your API, Microsoft Entra ID, authorization and a private database — the five layers that stand between a mobile app and its data on Azure.
An APK or IPA is a zip file. Anything hardcoded inside it, including your API key, is already public — and here is how to get it off the phone for good.
The business case for an AI agent on an app that already exists, what an agent really is, and the architecture that keeps it inside its lane.
A plain tour of Microsoft Foundry for developers: the resource, projects, models, agents, tools, and when Azure OpenAI on its own is enough.
End-to-end retrieval-augmented generation in C#: chunking, embeddings, hybrid vector search, and grounding a chat completion so it cites its sources.
A working JWT bearer auth setup for ASP.NET Core Minimal APIs — token validation, role policies, and the config mistakes that silently disable security.
Program.cs stops scaling around twenty endpoints. Here is a vertical-slice layout for Minimal APIs that keeps routing, validation and handlers organised.
A repeatable method for legacy discovery: turning the business rules, workflows and history a codebase never documented into knowledge Copilot uses.
A handbook for GitHub Copilot Agents on legacy code: what is a real feature, what is a pattern, and how to build an AI development team around it.
Tokens are not words, and they are not characters. Here is what a token really is, why AI billing counts them, and how to work out the cost of a request.
Fifteen tested habits that cut my monthly AI token usage without cutting how much I use AI, from context discipline to knowing when to restart a chat.
A 400K monthly AI token budget sounds generous until agent mode eats it in a week. Here is the daily Copilot workflow I use to make it last the month.
A beginner GitHub Copilot Hooks tutorial: what a hook is, why an AI agent needs deterministic guardrails, and how to write your first one in ten minutes.
The GitHub Copilot PR summary: why an auto-generated description that restates the diff is noise, and how to get one reviewers actually read.
A software architect on GitHub Copilot code review — build a Skill that automates the mechanical layer, and the limits that keep a human in the loop.
Build one GitHub Copilot Skill (SKILL.md) that guards your Azure Bicep — Managed Identity, private networking and cost tiers Copilot will not violate.
Build one GitHub Copilot Skill (SKILL.md) so Copilot writes Flutter the way your app does — layered folders, BLoC state, Firebase behind a repository.
A build-along for .NET developers — create one GitHub Copilot Skill (SKILL.md) that enforces Clean Architecture, CQRS and your API contract.
GitHub Copilot Skills explained by an architect — what they are, how they differ from prompts and instructions, and how to build reusable Skills for teams.
What belongs in an AGENTS.md file — architecture, security, testing, AI rules — plus what to leave out, common mistakes and a reusable template.
AI agents write more code each month than teams can review by hand. AGENTS.md is the one file that keeps it consistent — solo, team or enterprise.
GitHub Copilot custom instructions explained with a real Flutter app you can clone: what the file is, why every project needs one, and beginner mistakes.
New technical articles, Azure AI and GitHub Copilot updates, and upcoming events. No spam, unsubscribe anytime.
Testimonials
Suthahar Azure articles helped me understand complex cloud concepts with real-world examples. His explanations around Azure architecture, security, and best practices helped me complete my project tasks with more confidence."
Suthahar's article helped me complete my work faster. The explanation was clear, practical, and easy to apply in a real project.
The JWT bearer walkthrough caught a middleware ordering mistake we had shipped weeks earlier. Every protected endpoint was returning 401 and we could not work out why.
On: How to Secure a .NET Minimal API with JWT Bearer Authentication
Your turn
If something here saved you time or unblocked a real project, I'd love to hear about it. Submissions are reviewed before they appear on the site.
Apple only allows adding an app from Safari. Three quick taps:
You're not in Safari right now. Open blog.msdevbuild.com in Safari, then follow these steps.