ASP.NET Core Authentication Simplified | .NET Conf 2023

"An introduction to the new auth features introduced in ASP.NET Core 8 that make it easier to set up and customize local authentication for client applications (SPA, Blazor, mobile, etc...)
New features include: the new MapIdentityApi method which adds Identity HTTP APIs ( /register, /login, etc...) and can be used by mobile, desktop and SPA applications; a new opaque bearer token authentication handler; and new Identity Blazor Components."

#dotnet

[acodersjourney]

Your passion for what you do is contagious.

[olagisrarikis]

I would love an example not using Entity Frameword. There are numerous scenarios whete EF is not feasible.

[shafo]

I can't have usernames, just emails. Allow us to register usernames + email. Please review your docs too, they are a bit of a mess. Can't find a simple tutorial on how to create an API for authentication with Identity. No explanation on how to do a Register, Login method, etc. Only Blazor/Razor stuff. Most people use React/Angular and just want a tutorial on purely .net backend, no .net frontend stuff. I wanted to create my own register method that allows user registration and was lost in those docs.

[xanhxanh]

I love this update. please also do azure b2c roles next.

[Masteroxify]

Why so many examples of authentication in Blazor use database ?
Imo is the worst pattern, we should not combine database and frontend. Frontend should call the service on the backend to authenticate the user.

[manjurulkhan]

Sorry, what? Blazor server auth state magically gets transferred to client or vice versa? We need much more clarity guys!

[larthallor]

Feedback: I made it to 20:42 before I bailed. That this is the “simple” case and yet you two are tearing through what is clearly way too much content for the time allotted is an indictment of … something. Some combination of just how hard web authentication is combined with poor choices about what you chose to cover in the time allotted.

[severalpens]

All I want is a B2C SPA with a back end. Is there no way they can just pivot Power Apps to just supply an SPA canvas for developers?

[marcelmuller]

Where can I see the code? Is there a github link?

[agustinsilva]

Is there any way to add the Azure AD as a provider for the Individual user authentication in a blazor 8 server app ?

[agaviani]

this video should have been much longer....

[JibinMN]

Anyone else got a feel that it gets more complicated ? Or is it the way the changes are explained? [ Not make sense to me and might be my fault)

[shahryarsaljoughi]

Stephan says that: "If you want to pre-render sensitive data that only an authenticated user can see, you have to do authentication using cookies." Why is that? Does it mean that JWT based auth won't work with pre-rendering? Could someone elaborate on this?
I actually don't know how pre rendering comes to affect auth.

[ArmanOssiLoko]

Why is there about 0 customization? Why can't you opt-out of some routes and why can't you customize what your registration model should contain, etc.? I am genuinely failing to see how this would help anyone beside students that are learning about this in school.

[mdzakariamasud]

How to work with roles in this new identity api endpoints

[MornyDevelopment]

Where can I find the code shown in the video?? To much of the code not shown to get the full overview on how to implement.

[ahmedhafiz]

I wonder why there's no option for Individual Accounts in Web API template. Thats the most important option 🤦

[minimalstory]

thank you for the video, but transferring 30 megabytes to the client terrifies me, why no one likes to use blazor server....

[DestinationDub]

Yeah - unfortunately this still isn't it... 2 steps forwards and 3 steps back.

[dimitralex]

this camera background blur/filter stuff is just annoying... why you even do it? it’s not working probably, just looks awful and unprofessional... i know its not that important, but it really triggers me to that point i cannot concentrate