ASP.NET CORE : Implement JWT Token Authentication in Asp.net Core Web API C# [Simple Guide]

#aspnetcore #jwt #authentication #aspnetcorewebapi : A complete step-by-step process to implement JWT Token Authentication in ASP.NET Core Web API C# (JSON Web Token ). We must ensure that our APIs are protected and secure when developing them.

What is JSON Web Token?
The RFC 7519 JSON Web Token (JWT) is an open, industry-standard technique for securely conveying claims between two parties. This means that data sent between two parties using JWT is digitally signed and can be easily confirmed and trusted.

In short, using JWT we can implement Authentication and Authorization in any Web Application with any backend stack i.e Aspnet-Core, Java, NodeJs, Python, etc...



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[ananthganesh]

This is by far one of the best video, clear, concise and no lengthy talks. Thank you so much.

[nazihjrg]

thank u so much for the valuable article

[hornper]

I'm completely new to API security and this is the first video that guided me thru an easy to follow example. Thank you!

[STUPIDYOUTUBE_HIDINGMSGS]

The best and simplest, short and easy-to-follow JWT authentication I've seen so far! It would be nice if you can follow this up with creating RefreshToken or maybe consuming that API with the proper coding practices and structure as well? Then after that maybe follow the API consume video with Identity Server authentication? 💯 Thank you!

[jinoshkurisinkal]

Very neatly explained, one of the best videos for understanding JWT.

[himanshusingh-ppyo]

It is nice..end to end implementation is properly shown.

[suryapratapsingh]

Thank you for your efforts..Best Video..

[vishal]

Simple to understand jwt basics, nice video 👍

[osamashabbir]

Thank you so much for this easy explanation 🙂

[codingislife]

Thanks Sir . Can u Consume this JWT API in UI of MVC core .
very confuse

[babag]

Why do we need that key, issuer and audiance ???

[sergioramos]

Very nicely done..but pls explain the use of refresh token also..and if we want our authprovider not in controller actionresult how to achieve the same.

[totokpatrik]

The logic where you compare the received username and password is not right.
You should return with null (and unauthorized) when the username OR the password is not matching.
Other than that excellent video.

[mohammadrizkypratama]

How to setting, when running in browser go to swagger

[karthiksrivatsa]

Neat! But refresh token is not used in this.

[hrithickgokul]

I'm unable to install the nuget packages

[hemantsharma]

Very Very easy explanation. Thanks a lot