Developing Flexible Authorisation Capabilities in ASP.NET Core

on YouTube ↗47m

" summary

Demonstrates a concrete, working extension to ASP.NET Core: a Blazor WebAssembly app hosted on ASP.NET Core that replaces brittle role edits with Blazor WebAssembly hosted on ASP.NET Core UI to create roles, assign permissions, and add permissions without redeploying. Implements a dynamic policy provider that generates policies named like permissions{decimal} and a permissions stored as flags integer claim (examples: 32-bit enum, upgradeable to 64-bit; stored value like 5 or 117). Built components (flexible AuthorizedView, permission claim factory) work end-to-end in the demo.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 7:15Adding Roles
3. 13:38Flexible Authorisation
4. 24:59Overview
5. 28:08Flexible Authorization Engine
6. 33:39Other Parts
7. 41:47Summary
8. 43:47Wrap up

" related talks

• 51mDeveloping Flexible Authorisation Capabilities in ASP NET CoreJason Taylor · NDC Melbourne 2022
• 36mFlexible Authorisation with ASP.NET Core 7.0Jason Taylor · NDC Oslo 2023
• 56mImplementing authorization in web applications and APIsDominick Baier, Brock Allen · NDC Oslo 2017
• 57mAuthentication and Authorization in BlazorMarco De Sanctis · NDC London 2021
• 58mImplementing Authorization in Web Applications and APIsDominick Baier, Brock Allen · NDC London 2018
• 01h 07mGetting Authorization Right in .NET: Patterns, Pitfalls...Michele Leroux Bustamante · NDC Security 2026
• 51mAuthentication and Authorization in ASP.NET Core 2Roland Guijt · Update Conference Prague 2018
• 54mAuthorization for modern ApplicationsDominick Baier · NDC Oslo 2018