Hi Manoj it is very nice video explaining how to cosume custom API through secured AAD app but little confusion is that why we need to create two AAD apps one for AADclientand another spfx client and how this accesstoken is validated by azure web api, please help me to understand it
Thanks for your question, ideally it's best practice to follow and have pros too. Api registration can be used at multiple applications spfx can be one of them, so it's standardized to maintain the security. Helpful in a multi-tenant environment. It really goes case to case. But I recommend having a separate registration.