Developing Flexible Authorisation Capabilities in ASP NET Core

on YouTube ↗51m

" summary

Demonstrates a working permissions-based authorization system for ASP.NET Core + Blazor WebAssembly that replaces role-hardcoding with a permissions enum with Flags, a dynamic policy provider that builds policies like "permissions7" on demand, and a permission claim storing an integer. Adding an Auditor role and a new permission happens via UI (no code deploy) in the demo, authorization checks use bitwise AND, and the prototype supports 32 flags (64 if using long) and a custom Authorized attribute.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 1:09Introduction
3. 5:56Authorization in Blazor WebAssembly
4. 19:57Flexible Authorization - Engine
5. 20:51Code Walkthrough

" related talks

• 47mDeveloping Flexible Authorisation Capabilities in ASP.NET CoreJason Taylor · NDC London 2023
• 36mFlexible Authorisation with ASP.NET Core 7.0Jason Taylor · NDC Oslo 2023
• 56mImplementing authorization in web applications and APIsDominick Baier, Brock Allen · NDC Oslo 2017
• 57mAuthentication and Authorization in BlazorMarco De Sanctis · NDC London 2021
• 01h 07mGetting Authorization Right in .NET: Patterns, Pitfalls...Michele Leroux Bustamante · NDC Security 2026
• 58mImplementing Authorization in Web Applications and APIsDominick Baier, Brock Allen · NDC London 2018
• 54mAuthorization for modern ApplicationsDominick Baier · NDC Oslo 2018
• 57mA practical look at security and identity in ASP.NET Core and Entity Framework CoreJon P Smith · NDC Oslo 2019