security
ASP.NET Core Authentication Articles, Tutorials & News
ASP.NET Core Authentication articles, tutorials, and news from the DotNetNews archive.
165 articles Updated
This DotNetNews topic collects ASP.NET Core authentication material from the daily archive. ASP.NET Core Authentication sits in the ASP.NET Core and broader Microsoft web stack that most C# services use. The page is for people who already ship C# and need a faster way to find relevant posts.
Expect publisher tutorials, release notes, architecture write-ups, and field notes linked from DotNetNews issues. Start here is a short editorial shortlist for ASP.NET Core Authentication; the archive list is chronological and larger. Nothing here claims every article was production-tested by the editors.
Recurring subtopics in recent issues include .NET authentication, ASP.NET Identity, JWT authentication ASP.NET Core, and OAuth ASP.NET Core. Secondary angles such as ASP.NET Core authentication and .NET authentication appear when the archive actually covered them. Related hubs such as ASP.NET Core Authorization and JWT Authentication in ASP.NET Core cover adjacent problems.
Each card points at the original publisher URL and the DotNetNews issue that carried it, so you can read the article in context or jump straight to the source.
Start here
Editor picks for Authentication
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com Issue #492
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh.com Issue #477
Refreshingly production-minded guidance on API keys, including storage, hashing, and pipeline integration choices.
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
youtube.com Issue #474
Entra ID auth in ASP.NET Core and Aspire gets easier with AI assistance.
-
Building JWT Authentication with React + ASP.NET Core Web API
medium.com Issue #465
Straightforward full-stack auth coverage for teams wiring React to an ASP.NET Core API.
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Straightforward Minimal API protection with Swagger support, helpful for small services that need quick API key security.
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
Authentication in .NET can feel alien if you come from lighter frameworks, and this translator-style framing is sensible.
Archive
Page 1 of 7
Newest first
-
Implementing Passkeys in ASP.NET Core Identity Without Breaking Existing Authentication
c-sharpcorner.com Issue #514
Implement passkeys in ASP.NET Core Identity without breaking existing authentication. Enable passwordless login gradually.
-
Authentication in ASP.NET Core: JWT vs Cookies vs OAuth 2.0 Explained
c-sharpcorner.com Issue #514
Master ASP.NET Core authentication: JWT vs Cookies vs OAuth 2.0. Choose the right strategy for security, scalability, and user experience.
-
One rotating refresh token, and reuse detection that makes theft self-limiting
medium.com Issue #513
A stateless JWT you cannot revoke has to be short-lived, which forces a refresh token, which is a long-lived bearer credential that can be…
-
API Gateway Patterns in ASP.NET Core: Building Scalable Microservices with YARP
c-sharpcorner.com Issue #512
Build scalable microservices with ASP.NET Core and YARP. Centralize routing, auth, and more with a powerful API Gateway.
-
Implement SAML as an external provider in an ASP.NET Core Identity application using Duende as an OIDC server
damienbod.com Issue #511
This article shows how to implement a SAML federation from an ASP.NET Core Identity application using Sustainsys.Saml2.AspNetCore2. Entra ID is used to implement the SAML authentication and the users ...
-
Building Production-Ready MCP Servers in ASP.NET Core 10
c-sharpcorner.com Issue #510
Build secure, scalable, and production-ready MCP servers in ASP.NET Core 10. Learn best practices for AI integration, authentication, and deployment.
-
MCP Security Best Practices: Authentication, Authorization, and Secure Tooling
c-sharpcorner.com Issue #509
Secure your .NET MCP implementations with best practices for authentication, authorization, and tool design to protect AI integrations and enterprise data.
-
Securing ASP.NET Core APIs with Microsoft Entra ID Authentication
c-sharpcorner.com Issue #508
Secure ASP.NET Core APIs with Microsoft Entra ID. Learn authentication, configuration, and best practices for robust API security.
-
OAuth 2.1 Authentication in ASP.NET Core APIs: A Practical Guide
c-sharpcorner.com Issue #507
Master OAuth 2.1 for ASP.NET Core APIs. Learn PKCE, JWT validation, refresh tokens, and best practices for secure API authentication.
-
Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe
medium.com Issue #504
Storing a password is a solved problem, and almost every breach headline is someone who solved it the wrong way. Here are the four…
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Implement secure, passwordless passkey authentication in ASP.NET Core. Leverage FIDO2 & WebAuthn for enhanced security and user experience.
-
How does your domain know your user?
medium.com Issue #498
Almost every business application needs to answer a question that sounds simple: who is the current user? But “user” isn’t one thing…
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
Identity API Endpoints in ASP.NET Core: When to Use Them (.NET 10)
codewithmukesh.com Issue #497
MapIdentityApi gives you register, login, and refresh for free in .NET 10. Here is exactly when to use Identity API endpoints and when to roll your own.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com Issue #492
The Static Web Apps CLI has a local authentication emulator. This is a useful tool for local development, and can be used with ASP.NET authentication. This post shows how.
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Implement secure passkey authentication in ASP.NET Core apps. Enhance security & user experience with WebAuthn & FIDO2.
-
How Hidden Security Vulnerabilities Turn Into Business-Critical Incidents in Modern Applications
medium.com Issue #490
Security is a board-level concern. IBM’s latest breach report puts the global average cost at $4.4 million per incident ($10.22 million in… Continue reading on Emerline Tech Talk »
-
AI Security Testing: How to Validate Prompts, Models, and Tool Calls
c-sharpcorner.com Issue #489
Secure your AI systems! Learn to validate prompts, models, and tool calls for LLMs, RAG, and agents in .NET.
-
ASP.NET Core Identity with JWT Authentication - Step-by-Step Practical Guide
c-sharpcorner.com Issue #485
Master ASP.NET Core Identity & JWT for secure user registration, login, and role-based API authorization. A practical step-by-step guide.
-
Human Resource Management System in ASP.NET Core MVC
c-sharpcorner.com Issue #484
Build a Human Resource Management System (HRMS) in ASP.NET Core MVC. Covers setup, authentication, Admin, and Employee modules for efficient HR operations.
-
How to Build Custom MCP Servers in C# for Enterprise AI Applications
c-sharpcorner.com Issue #478
Learn how to build custom MCP servers in C# for enterprise AI applications. Discover MCP architecture, security best practices, tool development, authentication, and real-world integration patterns.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh.com Issue #477
Production-grade API key authentication in ASP.NET Core .NET 10. Hashed keys, DB-backed store, AuthenticationHandler, decision matrix, full source repo.
-
Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph
damienbod.com Issue #475
Configurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks at i...
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
youtube.com Issue #474
Join Jean‑Marc Prieur and Kyle Marsh to see how AI can streamline Entra ID authentication in ASP.NET Core and Aspire apps. We’ll explore using AI to set up app authentication, enable calls to protecte...