Multiple JWTs in .NET: How to Implement Multi-Token Authentication

Learn how to implement authentication using multiple JSON Web Tokens (JWTs) in your .NET applications.

In this video, we'll explore:
- Setting up multiple JWT authentication schemes
- Configuring token validation for different JWTs
- Managing multiple token types securely
- Best practices for multi-token auth architecture
- Step-by-step implementation guide

Perfect for .NET developers looking to implement sophisticated authentication scenarios with multiple JWT tokens. Whether you're building microservices or a complex web application, this tutorial will show you how to handle multiple authentication contexts efficiently.

Check out my courses:

Read my Blog here:

Join my weekly .NET newsletter:

Chapters
0:00 Multiple JWTs - how it works
2:02 Keycloak authentication
8:00 Supabase authentication
11:59 Default Authorization policy
13:55 Adding custom Claims

[baolam]

I found myself watching most of your videos. You really save me many times. So Grateful

[thiagomatu]

Nice, I work on an application that supports multiple authentication providers, but this your code is so much clean and easier to understand, thanks for sharing this Milan!

[cesarmauricioguerrerobatre]

Amazing, it was a masterful explanation, what happens when I have several clients coming from keycloak and I need a certain client to access a certain number of enpoints, how do I do this?

[yaelsleman]

Mr please.. I need to know what is you opinion about ABP framework and it is important to learn it?

[nenzax]

Great Video, quick question, how do we tie a particular controller method to a specific jwttoken, ex: api/getusers should use keycloak, api/getadmins should use supabse

[MrAlatau]

What if the API need to accept tokens from two providers, but only a few endpoints shall be shared, while some of them still have to be restricted to just one provider?

[eduardoyupanqui]

Wow, its no necessary add policyscheme to select the scheme to validate?