Basic Authentication in Dotnet API

Learn how to secure your Dotnet API with Basic Authentication. In this video I show how to set up your own custom Basic Authentication Handler, add claims, access those claims, and some simple Role Based Authorization.

Github repo with code from video:

More info on Role Based Authorization:

Follow me on social media!

Check out my blog!

[T.N.T.]

first 45 seconds and this guy already has a better video than most people out there on basic authentication. why is that so? Thank you so much. you do an awesome job with the necessary info upfront and than examples. I will be passing your videos around to colleges

[alexander]

after 47 seconds I got a lot more useful information compare to few hours on udemy... Thank you!!!

[snowglider-xn]

Can't thank you enough. Finally an easy video on basic auth on my .NET 8 API, got it all up and working, and even makes my swagger work nicely.

[eser-sahin]

A very nice channel, simple and clear explanations. I just discovered it. Thank you for the videos.

[themcr]

Very nice tutorial !
One mention, in the handler code, at line 50, when you wrote username != “like” && password != “subscribe” you shouldn’t use the AND operator but rather the OR operator.
With the AND operator, if just one is different and the other is equal it will pass with a success result.
If you put OR, if either one is different and one is equal, it will fail (as it should because both need to be equal in order to succeed).

[thomasyuen]

Thank you very much for this I need it so bad and i just cannot find the right one until i saw yours!!!

[isabelabianca]

Thank you very much! You helped me a lot and your explanation is amazing.

[nestormartinez]

Great, by the way I watched that you can implement authorization through middlewares. Is this an old approach or it is more about your preferences ?

[JorgeBenavidesQ]

Hi, thank you. Just one question, I'm getting 403

[foudilbenouci]

i have to fill the property AuthenticationSchemes of the authorize attibut like this : = "BasicAuthentication") otherwise i have a 404 not found response instead of 401

[srikalyanlingamaneni]

nce video.I need to authenticate an api which has username and password.I will try this basic authentication.

[itze_]

I want to see the using clauses.
The code is not in the link!

[AlexStewart-nhgc]

Why do people act as if BASIC auth doesnt exist. I dont want OAuth for an internal api that is IP restricted. Im the developer and if I decide basic auth is "secure enough" its up to me. Infuriates me searching for something so simple and Microsoft being like "Have you heard about OAuth and identity". Yes, i have used them many times, it just isnt needed now!

[wheelogger]

how to use AD Authentication in this setup?