Basics Part 1: Introduction to ASP.NET Core Authentication & Authorization

This is an excerpt from our 3-day training course called "Identity & Access Control for modern Applications using ASP.NET Core".

Understanding the fundamentals of the ASP.NET Core authentication & authorization system is crucial knowledge for every developer who needs to secure a web application.

Basics Part 1: Introduction to ASP.NET Core Authentication & Authorization

Basics Part 2a: Adding external Authentication to your ASP.NET Core Application

Basics Part 2b: The "external authentication callback" Pattern

Basics Part 3: Using OpenID Connect for Authentication

[arlvinmoyo]

Thank you. Definitely beginning to fill-in the gaps that existed on the subject.

[karthikmurali]

The pace and level of explanation is awesome. Kindly consider a video on BFF with a sample implementation.

[hashproton]

Great video, the problem is that it ends. I wasted so many weeks trying to understand this auth flow.

Thanks Dominick and Duende for this awesome content.

[leo-phiponacci]

The best authentication lessons that can be found on internet!

[PeacefulMindss]

At last, someone explained this topic in details, thank you sir, will wait for part 2, and JWT handling if you can make a detailed video about it.

[Sibbi]

Great video! Concise and clear at a nice pace with clear examples demonstrating as you go along. Just a great introduction through and through!

[dmitribodiu]

Super helpful. This is an indicator of a professional tutor. When complex info is ingested, digested and explained in detail in simple words. Awesome!

[BlownBytes]

Awesome video, great explanations of the authn & authz configuration that was easy to follow and understand.

[MrGustalia]

Thx for the Introduction, its exactly what I needed! Having a basic understanding on how Authentication/Authorization work with good practices like Policy instead of Roles

[nat-moba]

Finally a well explain tutorial, thank u, tell me how can I buy you a beer

[Moath]

thank you so much man that's great explanation i will share this video with my friends

[alexandermartospaschoal]

Grean video! Thanks for explaining it in detail. The video I have been looking for!!

[fandermill]

This is great, thank you for your content!

[markfrost]

Thank you, so many questions answered

[michaelsniknejs]

Great video! Well explained.
Just a small grammar mistake, @0:31 "we are often getting questions..". I've noticed this is the one mistake almost all Germans make. They never learn when to use simple present vs present continuous. If something is happening "often", then it's regular, and you have to use simple present, ie. "we often get questions".

[diegosasw]

Fantastic lesson. Thanks.

Is there any way to explore that cookie? I am seeing claims that are not part of id_token or access_token, at least not part of the cookie properties' tokens. Yet they are part of the HttpContext.User.. so they must be populated out of the cookie, as per your video. It's a mystery I don't understand.

[fieryscorpion]

This was insanely good. Learned a lot here! Thank you so mcuh!

Can you please create a video on BFF auth, mobile apps auth, API auth that looks like this:

Web app -> BFF -> Backend API
|
Identity Server

Here BFF provides authentication using Identity server (self hosted) using OIDC and passes some claims to BFF in the token. How does this BFF know the scopes allowed for the user? And how does Backend API know what permission does user has?

[govindkarthikeyan]

Great content, Thanks . Isn't "AccesDenied page" require [AllowAnonymous] attribute? Seems like its handled internally though !

[dancristian]

But is this asp. Net core identity using external providers ??? I do not get it yet

[fieryscorpion]

At 57:42, there's this process: "AuthZ middleware calls Challenge and redirects to LoginPath". Shouldn't this be "AuthN middleware..."?