Asp.net Core Authentication With JWT(Json Web Token) & Refresh Tokens

----------------------------------------------------------------------
What is JWT Token based authentication Web Api work flow? What is the need for Refresh Tokens?
User provides user name and password to the client application. Client application sends the user name and password to the Authorization server. Authorization server validates the credentials and returns JWT Token Web API. Client application preserves the token and sends the JWT Token to the Resource Server. Resource server validates the JWT Token Web API and sends the Resource.
-------------------------------------------------------------------
-----------------------------------------------------------------
---------------------------------------------------------------------
Swagger Authorization | Swagger Bearer Token
-----------------------------------------------------------------------
-----------------------------------------------------------------------
Apart from all the above information, we have used Entity Framework Core (EFCore) to preserve our Refresh tokens also I have demonstrated EF Core Database migrations.

Chapters
00:00:00 Introduction
00:00:50 Creating new Web Api Project
00:09:20 JWT Service class to generate JWT Token
00:22:39 JWT Token Anatomy
00:26:50 Swagger Authentication

[vinaypatel]

Excellent presentation of the topic - JWT access token and refresh token. I have been looking for a video which covers both (Access+Refresh token) for a long ..finally, the search ended here..Thanks a lot for this video.

[vijayalakshmiu]

Thanks a lot sir. I have gone through many jwt token videos. But no one has explained this. This is by far the best explanation thanks a lot sir. All your videos are very helpful. Hope to learn more

[anurag]

Very clear flow of information. Thanks a lot.
I have shared your channel on twitter with my friends.
Appreciate your efforts.

[PAJANI]

Excellent tutorial. particularly you showed some realtime token at 25:08 time signature created with azure. So that I get clear picture about the claims.

[솔비지]

It's a good course.
There is a problem with the source file (zip).
Please check and upload again.

[rajsatia]

Thankyou so much for creating this video. It is awesome and covered almost everything. God bless you. keep creating such videos.

[violenttendency]

Hi, thanks so much for the video. Quick question from a noob, but why add the jwt service as transient instead of singleton? Thanks

[nh--]

Thank you for efforts. Much appreciate

[TommiLipponen]

Dear Sir, When publishing ASP NET Core API and SQL Server DB to Azure Free Tier for practicing purposes only, with EF Identity and JWT authentication, using Visual Studio "Publish" funtionality. Are there any specific configurations or certificates that one must take care of. Or is it as simple as without JWT authentication? Thank you for this tutorial.

[LebaneseNostalgia]

Hello thank you for the video, still no git for this?

[YOUTUBE_IS_WOKE]

Hi, thanks for sharing your knowledge, but why do you have to use the remote IP? Say my token has expired and I'm using a community library computer to renew the token, so that the validation won't pass since I'm using a different IP. I've seen quite a number of refresh token code but yours is the first time I've seen that IP address is used, care to explain the logic behind it?

[ajaykembale]

How can we handle it in API itself when token is expired & still need to continue without logging out from application, request is anyhow being unsuccessful in this case & then we are passing request for refresh token!!

[jaypatadia]

Hii I'm getting error in the post method of refresh token that unable to cast object of type system.string to type system.datetime

[jahangir]

Sir, Please make a video for consume this API, Store token etc...

[rama]

Great tutorial, can you please share the code base

[joshk]

Do you have the code for this example?

[josephinepyre]

Thank you for this video. Could you share your code please ? Thank you