Implementing API Key Authentication in ASP.NET Core

Hello everybody I'm Nick and in this video I will show you all the approaches you can use to add API Key based authentication in you ASP.NET Core APIs. I will cover a generic approach and then Controller and Minimal API specific approaches and also show you how you can add Open API support for Swagger.

Don't forget to comment, like and subscribe :)

Social Media:

#csharp #dotnet

[facephonesy]

I love your videos, you are so professional, but i would really love and appreciate if you make a small app, that shows us how yo implement all the best practices you teach us, I mean I learn tbd concept from you, and I always go and implement it in my projects, but sometimes I get lost in the implementation. If you can just do a todo list api, with all the consepts, like rest API rules, versioning, SOLID, services, mapping, results, responses. Thank you very much for the great content 🙏

[NathanWienand]

Hi Nick I love your videos so very much!
*Hint* You probably already know this, but rather than using the Generate Guid tool (which means moving hand to mouse etc.) you can just type "nguid [tab]" and Rider will allow you to insert a new guid and even select the version without dashes. :) Keep up the great work mate!

[ryanobray]

I would love to see examples using OAuth 2 Client Credentials flow (using an IDP service like Okta or Auth0) where the APIs accept a valid bearer token.

[MaiconLLoti]

i always copy/paste some example from the internet and i never stop to think how it works because the explanation is almost always just technical terms and blah blah hard to understand
your explanation is without a doubt simple, objective and easy to understand, thank you very much

[voliansky]

Thanks for the awesome video.
Would be very interesting to see JWT Bearer auth with refresh tokens as well.

[margosdesarian]

Hi Nick, i love your videos - and this is one is especially great. In this short video you have explained so many things in a clear and concise way. Its great!!

[RonyFayyad]

This is exactly what I was lookinf for to use in my current project. Well done on providing such great content; clean, concise and easy to follow.

[onmico]

Great video Nick, as always! A tip to others: the same principal can be used to enforce client certificate based auth, minus the Swagger UI integration. This way, you can easily enforce different types of auth on different scopes within the same API.

[johnsitka]

Great help, exactly what I needed. Thanks tons. Since adopting Blazor Server then finding Minimal API's I can now build Api's without MVC "and" secure them. I remember first hearing of WebSocket so many years ago, throw in Entra, Microsoft Graph, and Application Proxy we now have flying cars for the enterprise.

[juliansegura]

I finally can understand this concept to it's fullest. Thanx for the great content

[takeshi_taro]

To get rid of [ServiceFilter(typeof(...)] thing you can derive from ServiceFilterAttribute and provide default ctor with :base Then you can use your filter directly (ApiKeyAuthFilterImpl is actual implementation of filter, must be registered in DI container)

[stephenmiller]

Id love to see example of storing multiple API Keys in database and comparing the header key to those in the database. I have a scenario where I will have multiple clients using the API and would like to have a different API Key to give them access to their own data. Great video !

[MeerHussainAbrar]

Thank you Nick! This video greatly helped me. You covered all aspects, including the Swagger which I was struggling with. Thank you 🙏

[carstenberggreen]

Tak! Brilliant video! Covers all my thoughts and questions about API Keys in one video!

[linhvuquach]

Extremely interested in the way you presented and covered different approaches. Thanks bro

[amandasanti]

To get around the dependency injection problem you can create a custom attribute that extends from TypeFilterAttribute, which then passes typeof(MyFilter) to the base constructor. From there the system will allow you to use DI in your filter.

[ecitahpi]

the longest app. 18 minutes in my life :D thank you for the explanation!

[kaymeister]

Great video! Thanks a lot for your efforts, Nick! You're great

[alejomunoz]

This help me a lot, very well explained. Thank you !

[broadshare]

Thank you, very useful auth concept. Was just looking for something like it