Authentication and Authorization in Blazor - Marco De Sanctis - NDC London 2021

Thanks to Blazor, every .NET developer can now build Single Page Applications with a familiar syntax, sharing code with the server and leveraging C# instead of JavaScript. However, the technical architecture is fundamentally different than the one of ASP.NET MVC or Razor Pages, especially when it comes to supporting modern security protocols, such as OpenID Connect and OAuth.

During this talk, we'll do a deep dive into the security model of Blazor, understanding the components involved and the differences between Blazor Server and Web Assembly.

We'll start with a practical example on how to integrate our Blazor application with Identity Server 4 and use OAuth to securely call an external API. After having established our baseline, we'll gradually start adding complexity: we'll first be introducing roles, and then we'll show how policies can allow us to achieve a bigger abstraction over the permissions and actions a user can perform in the application.

As the last step, we'll see what changes are needed to make sure that our application behaves correctly in a PWA scenario when we need to support an offline mode.

[fieryscorpion]

Great demo! Thank you!
Can you please share the code repo?

[markwiliams]

Hi. Good video, kudus! Quick question: any special reason for you to be using the version you used in the demo? You are using 3.1.0 and the last version they released was 4.1.2

[wenshan]

Thank you. Very nice video. Is there any way to download the example code from somewhere? It would be nice to have it for better understanding.

[GuillaumeMaka]

Thank you very much for the presentation. Now I have a better understanding on how Blazor do authentication. The documentation about securing Blazor isn't very helpful.

[HackelSchorsch]

Good explanations but the sound quality is very low and you are talking very fast. So it is really hard for me to follow.

[enetstudio]

Are you interested in getting help and private lessons via email in exchange for a small donation to a charitable organization ? You may find my email address in the stackoverflow site under the profile for the "enet" user.