Authentication and Authorization in ASP.NET Core 2
summary
Compares ASP.NET Identity (single-app, local users, two‑factor, roles) with running a central token service using IdentityServer (OpenID Connect/OAuth2), shows an in‑memory prototype and a DB‑backed configuration+operational store with developer signing credential then production certs, explains identity vs access tokens and consent flow, wires an ASP.NET Core client using the discovery endpoint, and implements policy‑based authorization with custom claim requirements (example: yearsOfExperience >= 5) and handlers — all demos run end‑to‑end.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 5:53ASP.NET Core Identity basics
- 12:28Configuring Identity
- 19:48Authentication across apps
- 23:14Identity Server and tokens
- 33:10Setting up Identity Server
- 39:00Using Identity Server
- 44:00Policy-based authorization
- 47:14Custom authorization policies
- 50:29Q&A
related talks
59mThe whirlwind tour of Authentication and Authorization with ASP.NET Core
01h 04mImplementing Authentication and Authorization with ASP.NET Core 2
59mASP.NET Core Authentication and Authorization - the Key Concepts
57mASP.NET Core Authentication and Authorization - the Key Concepts
54mOpenID Connect In Depth
58mLet's talk Auth
54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
58mSecurity in ASP.NET Core 2.0