security
ASP.NET Core Authentication Articles, Tutorials & News
ASP.NET Core Authentication articles, tutorials, and news from the DotNetNews archive.
213 articles Updated
This DotNetNews topic collects ASP.NET Core authentication material from the daily archive. ASP.NET Core Authentication sits in the ASP.NET Core and broader Microsoft web stack that most C# services use. The page is for people who already ship C# and need a faster way to find relevant posts.
Expect publisher tutorials, release notes, architecture write-ups, and field notes linked from DotNetNews issues. Start here is a short editorial shortlist for ASP.NET Core Authentication; the archive list is chronological and larger. Nothing here claims every article was production-tested by the editors.
Recurring subtopics in recent issues include .NET authentication, ASP.NET Identity, JWT authentication ASP.NET Core, and OAuth ASP.NET Core. Secondary angles such as ASP.NET Core authentication and .NET authentication appear when the archive actually covered them. Related hubs such as ASP.NET Core Authorization and JWT Authentication in ASP.NET Core cover adjacent problems.
Each card points at the original publisher URL and the DotNetNews issue that carried it, so you can read the article in context or jump straight to the source.
Start here
Editor picks for Authentication
-
Implementing Passkey Authentication in ASP.NET Core Applications
C# Corner Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
C# Corner Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
I CAN MAKE THIS WORK Issue #492
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh Issue #477
Refreshingly production-minded guidance on API keys, including storage, hashing, and pipeline integration choices.
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
YouTube Issue #474
Entra ID auth in ASP.NET Core and Aspire gets easier with AI assistance.
-
Building JWT Authentication with React + ASP.NET Core Web API
Medium Issue #465
Straightforward full-stack auth coverage for teams wiring React to an ASP.NET Core API.
-
The simplest way to secure a Minimal API (With Swagger)
Round The Code Issue #445
Straightforward Minimal API protection with Swagger support, helpful for small services that need quick API key security.
-
On why devs from other languages find Authentication in .NET the most difficult part
Medium Issue #444
Authentication in .NET can feel alien if you come from lighter frameworks, and this translator-style framing is sensible.
Archive
Page 1 of 9
Newest first
-
JWT Authentication in ASP.NET Core Web API (.NET 10): Identity, Refresh Tokens and a Locked MCP Endpoint
C# Corner Issue #578
Before you let AI near your API, you need to know who is asking. In this article we take an ASP.NET Core Web API (.NET 10, EF Core and PostgreSQL) that has no login at all and lock it down with ASP.NE...
-
Building a Secure JWT Authentication & Refresh Token System with Clean Architecture in ASP.NET Core
C# Corner Issue #578
Build JWT and refresh-token authentication in ASP.NET Core using Identity, token rotation, Clean Architecture, and a repository-based persistence layer.
-
How to Sign Custom AWS HTTP Requests in .NET Using the SigV4 Signer
C# Corner Issue #577
Learn how to use the AWS SigV4 signer in .NET to sign and send custom HTTP requests with AWS credentials, regions, and service settings.
-
What's new in ASP.NET Core authentication in .NET 11
Personal Blog of Tore Nestenius | Insights on .NET, C#, and Software Development Issue #577
What changed in ASP.NET Core authentication, authorization and Data Protection in .NET 11 RC2 and the .NET 10 updates, found by comparing the source code.
-
How to Use Azure OpenAI with the GitHub Copilot SDK in a C# Application
C# Corner Issue #576
Learn how to evaluate and configure GitHub Copilot SDK and Azure OpenAI integration in a C# application, including model providers, authentication, configuration, and secure credential handling.
-
How to Revoke a JWT Before It Expires
Milan's .NET Weekly Issue #574
ASP.NET Core validates a JWT by its signature and expiry, so a stolen token keeps working after the user changes their password.
-
Beyond Convention-Based Middleware: Mastering Factory-Based IMiddleware in ASP.NET Core
Medium Issue #573
In ASP.NET Core, middleware forms the core processing pipeline for every incoming HTTP request. Whether you are handling authentication…
-
How to Add Passkey Login to an ASP.NET Core Application
C# Corner Issue #572
Learn how to configure and register passkeys in an ASP.NET Core Identity application using .NET 10, WebAuthn, and passwordless authentication practices.
-
SMS Option for 2FA unavailable
Microsoft Tech Community - Cheesewaj Issue #570
PENDING REVIEW: MICROSOFT ARTICLE UNRETRIEVABLE (HTTP 403). Hello, My mother is currently having issues with 2-factor authentication for resetting her Windows account password, with a message coming u...
-
Verify Webhook Signatures and Reject Replayed Requests
C# Corner - Saurav Kumar Issue #566
Learn how to verify HMAC webhook signatures from raw request bodies and prevent replayed requests with timestamps, event IDs, and idempotent processing in ASP.NET Core.
-
Use multiple schemes in an ASP.NET Core Web application
Software Engineering - damienbod Issue #565
This article looks at using multiple authentication schemes in an ASP.NET Core web application. I required something like this when migrating a large application to a new identity provider and reducin...
-
How to Add Passkey Login to an ASP.NET Core Application
C# Corner Issue #565
Learn how to add passkey login to ASP.NET Core using WebAuthn, including credential storage, registration challenges, authentication verification, and security considerations.
-
How to Change JWT Signing Keys Without Breaking Existing API Clients
C# Corner Issue #565
Learn how to rotate JWT signing keys in ASP.NET Core while validating tokens signed with old and new keys during a secure transition.
-
Secure Password Hashing and Verification in ASP.NET Core
C# Corner - Sardar Mudassar Ali Khan Issue #564
-
Automating Microsoft Entra ID User Lifecycle Management with PowerShell and Microsoft Graph
Microsoft Tech Community - Deleted Issue #563
Introduction — The Problem Managing user accounts throughout the employee lifecycle is one of the common responsibilities of an Identity or Microsoft 365 administrator. When an employee joins an organ...
-
Securing Your ASP.NET Core API: Adding JWT Bearer Authentication to Swagger
C# Corner - Sardar Mudassar Ali Khan Issue #562
-
Pre-authenticated (tempauth) URLs are retiring: move to Microsoft Entra ID tokens before April 1, 2027
Microsoft Dev Blogs - SharePoint team Issue #561
Starting April 1, 2027, affected Microsoft Graph file APIs will no longer return pre-authenticated URLs. Applications using these APIs must authenticate requests with Microsoft Entra ID access tokens....
-
What’s Inside That Bearer Token? A Practical Guide to Encrypted JWTs (JWE) in .NET
Medium - Robert Dennyson Issue #559
How to recognize a JWE, inspect its header, and decrypt it safely with .NET when you own the right key.
-
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8
Andrew Lock | .NET Escapades Issue #554
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
-
How to Add JWT Authentication to SignalR Hubs in ASP.NET Core
Medium - Anton Martyniuk Issue #552
SignalR makes real-time communication in .NET applications simple. Continue reading on CodeX »
-
.NET 10 MCP Authentication: How OpenCode Uses a Bearer Token with ASP.NET Core MCP Server
Medium Issue #548
In the previous post, I already made .NET 10 ASP.NET Core support MCP, and OpenCode could directly call UpdateHoroscope to update the…
-
Authentication in ASP.NET Core
Medium Issue #546
A deep-dive walkthrough of authentication in ASP.NET Core — covering the ClaimsPrincipal/ClaimsIdentity model everything else builds on…
-
One OAuth2 Library for Every Kind of .NET App
Medium Issue #545
Adding “Sign in with Google” to a .NET app sounds like a solved problem, until you have more than one kind of app.
-
I Need My CI/CD Pipeline to Access Cosmos DB Without Using a Secret
Microsoft Dev Blogs Issue #544
In the last post we walked through
-
7 Authentication Concepts Every Developer Should Know: From Basic Auth to OAuth2 and OIDC
C# Corner Issue #544
A beginner-friendly, diagram-backed walkthrough of the seven core authentication concepts every developer should understand from Basic Auth and sessions to JWTs, OAuth2, and OpenID Connect/SSO with re...