ASP.NET Core Web API Authentication & Authorization Tutorial

In this video, we walk through Task 6.1 - Basic Authentication and Authorization, a practical project for learning how to secure your ASP.NET Core Web API backend. This hands-on guide covers:

✅ Implementing Basic HTTP Authentication (RFC7235)
✅ Creating and configuring a custom BasicAuthenticationHandler
✅ Managing users via a new UsersController
✅ Storing user data securely in a PostgreSQL database
✅ Securing API endpoints with claims-based authorization
✅ Using the built-in PasswordHasher for safe password storage
✅ Enforcing AdminOnly and UserOnly policies using claims
✅ Setting up and testing the full HTTPContext authentication flow

📚 Whether you're aiming for a Pass, Credit, or Distinction, this video breaks down everything you need to understand and implement secure access control in a real-world API application.

🛠️ Technologies Used:

ASP.NET Core Web API

PostgreSQL

C#

HTTPContext & Middleware

Claims-based Security