- Published on
API keys are the right fit for server-to-server APIs where full OAuth is overkill. Three ways to enforce one in ASP.NET Core - middleware, an MVC filter, and a minimal API endpoint filter - and when each fits.
Authentication
All Posts
- net (41)
- csharp (40)
- entity-framework (18)
- aspnetcore (15)
- efcore (11)
- aspnet-core (11)
- performance (8)
authentication (4)
- sql-server (4)
- identity (4)
- minimal-api (4)
- design-patterns (3)
- database (3)
- bulk-operations (3)
- ci-cd (3)
- security (2)
- repository-pattern (2)
- sql (2)
- docker (2)
- deployment (2)
- angular (2)
- jwt (2)
- migrations (2)
- mediatr (2)
- clean-architecture (2)
- background-jobs (2)
- azure-devops (2)
- pipelines (2)
- devops (2)
- ioc (1)
- api-key (1)
- auditing (1)
- dapper (1)
- dotnet (1)
- decorator (1)
- dependency-injection (1)
- kubernetes (1)
- docker-compose (1)
- react (1)
- signalr (1)
- real-time (1)
- dotnet10 (1)
- scripting (1)
- dotnet-10 (1)
- scaffold (1)
- inheritance (1)
- github-actions (1)
- azure (1)
- concurrency (1)
- middleware (1)
- error-handling (1)
- builder-pattern (1)
- fluentvalidation (1)
- pdf (1)
- questpdf (1)
- reporting (1)
- hangfire (1)
- email (1)
- smtp (1)
- iis (1)
- minimal-apis (1)
- testing (1)
- unit-testing (1)
- xunit (1)
- moq (1)
- multi-tenancy (1)
- quartz (1)
- worker-service (1)
- refit (1)
- httpclient (1)
- api (1)
- authorization (1)
- Published on
Put roles in the JWT, seed them with Identity, and gate endpoints with RequireRole - plus refresh tokens in HttpOnly cookies so the whole flow works from a browser.- Published on
Wire ASP.NET Core Identity's built-in API endpoints to an Angular app - login, a bearer token on every request, and an HTTP interceptor that silently refreshes an expired token and retries the failed call.- Published on
Add authentication to your .NET 10 Web API in minutes using the built-in Identity API endpoints - no custom controllers needed.