security
ASP.NET Core Authentication Articles, Tutorials & News
ASP.NET Core Authentication articles, tutorials, and news from the DotNetNews archive.
179 articles Updated
This DotNetNews topic collects ASP.NET Core authentication material from the daily archive. ASP.NET Core Authentication sits in the ASP.NET Core and broader Microsoft web stack that most C# services use. The page is for people who already ship C# and need a faster way to find relevant posts.
Expect publisher tutorials, release notes, architecture write-ups, and field notes linked from DotNetNews issues. Start here is a short editorial shortlist for ASP.NET Core Authentication; the archive list is chronological and larger. Nothing here claims every article was production-tested by the editors.
Recurring subtopics in recent issues include .NET authentication, ASP.NET Identity, JWT authentication ASP.NET Core, and OAuth ASP.NET Core. Secondary angles such as ASP.NET Core authentication and .NET authentication appear when the archive actually covered them. Related hubs such as ASP.NET Core Authorization and JWT Authentication in ASP.NET Core cover adjacent problems.
Each card points at the original publisher URL and the DotNetNews issue that carried it, so you can read the article in context or jump straight to the source.
Start here
Editor picks for Authentication
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com Issue #492
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh.com Issue #477
Refreshingly production-minded guidance on API keys, including storage, hashing, and pipeline integration choices.
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
youtube.com Issue #474
Entra ID auth in ASP.NET Core and Aspire gets easier with AI assistance.
-
Building JWT Authentication with React + ASP.NET Core Web API
medium.com Issue #465
Straightforward full-stack auth coverage for teams wiring React to an ASP.NET Core API.
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Straightforward Minimal API protection with Swagger support, helpful for small services that need quick API key security.
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
Authentication in .NET can feel alien if you come from lighter frameworks, and this translator-style framing is sensible.
Archive
Page 1 of 8
Newest first
-
ASP.NET Core: JWT Authentication and Authorization
towardsdev.com Issue #528
-
Use Aspire to implement and deploy the BFF security architecture
damienbod.com Issue #527
This blog demonstrates how to use Aspire to set up a solution for developing and deploying an ASP.NET Core web application with Auth0 as the identity provider and a downstream API. The application use...
-
The Lazy Engineer’s Blueprint, Part 7: Security
medium.com Issue #526
Part 7: authenticate a person or a machine, project the caller into a module without the host, and authorize with policies off the handler.
-
Stopping copy-paste of Frontegg auth across 15 .NET services
medium.com Issue #525
We had a simple goal: around a dozen .NET applications on our platform needed to integrate with Frontegg, and nobody wanted to implement…
-
PostgreSQL 18 OAuth Authentication with ASP.NET Core Identity
c-sharpcorner.com Issue #524
PostgreSQL 18 OAuth integrates with ASP.NET Core Identity for secure database authentication, enhancing layered security without replacement.
-
Implement BFF using Auth0, Angular and ASP.NET Core
damienbod.com Issue #523
This post should how to implement a web application which needs secure access and secure identities. The application uses Angular as the UI tech, ASP.NET Core as the backend tech and a backend for fro...
-
Building Secure and Scalable Multi-Tenant SaaS Applications with .NET and Angular
c-sharpcorner.com Issue #520
Learn how to build secure and scalable multi-tenant SaaS applications with .NET and Angular, covering tenant isolation, database architecture, authentication, scalability, monitoring, and DevOps.
-
Authorization Code + PKCE in .NET 10: Securing Angular, Gateway, and Downstream APIs
c-sharpcorner.com Issue #519
Secure Angular & .NET 10 apps with Auth Code + PKCE. Protects SPAs, Gateways, and APIs for robust enterprise security.
-
Modern authentication in ASP.NET Core with 2FA and passkey
blog.elmah.io Issue #519
This walkthrough builds a .NET 10 ASP.NET Core Web API (TwoFaNET10) implementing two-factor authentication and WebAuthn/FIDO2 passkey login, using Microsoft.AspNetCore.Identity.EntityFrameworkCore wit...
-
Implementing JWT Authentication with Secure Refresh Tokens in .NET Core
c-sharpcorner.com Issue #519
Implement secure JWT authentication with refresh tokens in .NET Core. Learn to generate, validate, and refresh tokens for stateless API security.
-
Google and GitHub login without leaking tokens: external OAuth behind your own JWTs
medium.com Issue #518
You want “Sign in with Google” and “Sign in with GitHub.”
-
ASP.NET Core 10 Authentication & Authorization Best Practices
c-sharpcorner.com Issue #517
Master ASP.NET Core 10 authentication & authorization best practices. Secure your APIs, protect user data, and build production-ready applications.
-
JWT Session 14: Implement Refresh Token Authentication in ASP.NET Core Web API
c-sharpcorner.com Issue #515
Enhance ASP.NET Core Web API security with JWT refresh tokens. Learn to implement long-lived refresh tokens for seamless user authentication and improved UX.
-
Understanding the Role of Microsoft Entra ID in Microsoft Intune
c-sharpcorner.com Issue #515
Discover how Microsoft Entra ID powers Intune for secure device management, user authentication, and policy enforcement for your organization.
-
Implementing Passkeys in ASP.NET Core Identity Without Breaking Existing Authentication
c-sharpcorner.com Issue #514
Implement passkeys in ASP.NET Core Identity without breaking existing authentication. Enable passwordless login gradually.
-
Authentication in ASP.NET Core: JWT vs Cookies vs OAuth 2.0 Explained
c-sharpcorner.com Issue #514
Master ASP.NET Core authentication: JWT vs Cookies vs OAuth 2.0. Choose the right strategy for security, scalability, and user experience.
-
One rotating refresh token, and reuse detection that makes theft self-limiting
medium.com Issue #513
A stateless JWT you cannot revoke has to be short-lived, which forces a refresh token, which is a long-lived bearer credential that can be…
-
API Gateway Patterns in ASP.NET Core: Building Scalable Microservices with YARP
c-sharpcorner.com Issue #512
Build scalable microservices with ASP.NET Core and YARP. Centralize routing, auth, and more with a powerful API Gateway.
-
Implement SAML as an external provider in an ASP.NET Core Identity application using Duende as an OIDC server
damienbod.com Issue #511
This article shows how to implement a SAML federation from an ASP.NET Core Identity application using Sustainsys.Saml2.AspNetCore2. Entra ID is used to implement the SAML authentication and the users ...
-
Building Production-Ready MCP Servers in ASP.NET Core 10
c-sharpcorner.com Issue #510
Build secure, scalable, and production-ready MCP servers in ASP.NET Core 10. Learn best practices for AI integration, authentication, and deployment.
-
MCP Security Best Practices: Authentication, Authorization, and Secure Tooling
c-sharpcorner.com Issue #509
Secure your .NET MCP implementations with best practices for authentication, authorization, and tool design to protect AI integrations and enterprise data.
-
Securing ASP.NET Core APIs with Microsoft Entra ID Authentication
c-sharpcorner.com Issue #508
Secure ASP.NET Core APIs with Microsoft Entra ID. Learn authentication, configuration, and best practices for robust API security.
-
OAuth 2.1 Authentication in ASP.NET Core APIs: A Practical Guide
c-sharpcorner.com Issue #507
Master OAuth 2.1 for ASP.NET Core APIs. Learn PKCE, JWT validation, refresh tokens, and best practices for secure API authentication.
-
Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe
medium.com Issue #504
Storing a password is a solved problem, and almost every breach headline is someone who solved it the wrong way. Here are the four…
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…