The .NET 8 Auth Changes You Must Know About!

Hello, everybody, I'm Nick, and in this video, I will show you how Authentication and Identity have changed in .NET 8 in an effort to simplify it and make it more accessible.

Subscribe to Amichai: @amantinband

Don't forget to comment, like and subscribe :)

Social Media:

#csharp #dotnet

[eg]

This is such a helpful addition. I recently had to build whole identity system and whilst a lot of the heavy lifting was taken care for me by identity, I had to build the endpoints for generating & refreshing tokens, resetting user passwords, etc. This would have saved SO much of my time.

[josephizang]

This is perfect! I think Microsoft should prescribe the right way of doing things and leave it to devs to customize it in anyway they want. Nice video Nick

[ExpensivePizza]

I literally just manually coded something like this a couple of weeks ago. This would have made things much easier.
I would love to see more content around this topic on the different token types, how to integrate it with front end frameworks like React and Vue and different backend databases like MongoDB.

[luis]

Hope the new documentation will be clear about the addition of social login options 😬

[PippiTheLongSock]

I would love to see how well these endpoints could be customized. For example, what if you want to have some custom fields when registering a user (first name, last name, etc). How can you modify the request body? You also need to override the underlying implementation of the given endpoint.
Suggestion for you Nick:
When all of the new improvements to the way we deal with identity are finally released in dotnet 8, can you create a full course on what would be the modern/recommended approach of working with identity. Because over the years there have been so many ways and it really has become confusing (especially for a beginner). Also, Microsoft have been pushing the Identity UI MVC (or was it actually razor pages, idk) built-in capabilities, which for me was a mistake as the industry is really moving away from the MPAs. I promise I would be the first to buy this course :)

Edit: You can even collaborate with Anton from RawCoding because as you know he is very passionate about auth

[jerryjeremy]

I really like it. Thanks Nick. I hope you create a video about this in full details and features.

[jeffbarnard]

This is great for small projects, but it's not OAuth2.0 and OIDC standardized. We'll still need to integrate OpenIddict or IdentityServer for full compliance

[jeffjones]

This is awesome! After setting up auth so many times this will definitely help streamline and make the process easier.

[marijnfeijten]

For one of my projects I was looking into doing this myself and thought it would be a pain to setup. Then I saw that Microsoft was adding this and it looks really cool. Thanks for explaining yet another great topic!

Looks great I just hope there is enough customization possible and (more important) that the documentation for customization is well written.
Are there also razor pages/blazor templates for UI variants of the endpoints?

[alex.semeniuk]

Nick, you are doing a great job! Keep it up.

[fifty-plus]

Finally, I've been using this since it dropped instead of writing a ton of custom code. Very nice.

[saicharan]

I just needed this for what I am building. Thanks a lot.

[ZimTachyon]

You deliver excellent and relevant information which helped me a lot. Thank you.

[virtualdars]

This is great! In this example the protected endpoint resides on the same Auth microservice (with RequireAuthorization()).
Nick, can you please show us another sample of the separate API service that performs validation of the access tokens issued by this Auth service? Thank you!

[hemant-sathe]

It’s great to see the improvements and also encouraging to see David Fowler replying to questions. Loving it. Is it possible to set up an independent auth server with this to be shared across multiple services? Also does this work with other third party systems like social login and azure Active Directory? Can we map the user with any Active Directory attributes like email, name, groups etc?

[todorkatsarski]

I loved that Doug reference. THIS is awesome content.

[SnOrfus]

This is definitely great, and a move in the right direction. That said, in the enterprise, it’s extraordinarily rare to build authn as part of your API like this. You’re almost always integrating with a 3rd party IdP/oidc/saml, and that integration is equally annoying.

[luigicfilho]

For my case, I'm going for another approach, because the token get exposed in the client, any script on the browser has access.
This can be a great idea to do a new video about the "backend for frontend" :)

[allenn]

Great intro to this new feature. Echoing questions about generating and customizing UI for AspNet, Blazor, or SPA frameworks. Wondering if there are templates to start with. Looks perfect for a simple personal web site that has auth for an admin area or customer/client features. Wondering if it can be used for a Generic Host as well as for a Web Host. Will have to try it. Looks good!