What problem does it solve?
Authentication and authorization guidance that helps you protect ASP.NET Core endpoints correctly, so only the right users (and claims) can access the right resources without leaking secrets or weakening token validation.
Core Features & Use Cases
- JWT bearer token authentication: Validate issuer, audience, lifetime, and signing keys for API access.
- Policy-based authorization: Replace brittle role checks with composable authorization policies using roles and claims.
- Multiple auth modes: Use OpenID Connect for external identity providers and ASP.NET Identity for user management.
- Endpoint protection patterns: Require authorization at groups or per-endpoint level, while allowing specific public routes.
- Secret handling & safety: Keep keys out of source control and never disable critical token validation.
Quick Start
Use the authentication skill to set up JWT bearer authentication and policy-based authorization for your ASP.NET Core API.