security
ASP.NET Core Authentication Articles, Tutorials & News
ASP.NET Core Authentication articles, tutorials, and news from the DotNetNews archive.
190 articles Updated
This DotNetNews topic collects ASP.NET Core authentication material from the daily archive. ASP.NET Core Authentication sits in the ASP.NET Core and broader Microsoft web stack that most C# services use. The page is for people who already ship C# and need a faster way to find relevant posts.
Expect publisher tutorials, release notes, architecture write-ups, and field notes linked from DotNetNews issues. Start here is a short editorial shortlist for ASP.NET Core Authentication; the archive list is chronological and larger. Nothing here claims every article was production-tested by the editors.
Recurring subtopics in recent issues include .NET authentication, ASP.NET Identity, JWT authentication ASP.NET Core, and OAuth ASP.NET Core. Secondary angles such as ASP.NET Core authentication and .NET authentication appear when the archive actually covered them. Related hubs such as ASP.NET Core Authorization and JWT Authentication in ASP.NET Core cover adjacent problems.
Each card points at the original publisher URL and the DotNetNews issue that carried it, so you can read the article in context or jump straight to the source.
Start here
Editor picks for Authentication
-
Implementing Passkey Authentication in ASP.NET Core Applications
C# Corner Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
C# Corner Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
I CAN MAKE THIS WORK Issue #492
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh Issue #477
Refreshingly production-minded guidance on API keys, including storage, hashing, and pipeline integration choices.
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
YouTube Issue #474
Entra ID auth in ASP.NET Core and Aspire gets easier with AI assistance.
-
Building JWT Authentication with React + ASP.NET Core Web API
Medium Issue #465
Straightforward full-stack auth coverage for teams wiring React to an ASP.NET Core API.
-
The simplest way to secure a Minimal API (With Swagger)
Round The Code Issue #445
Straightforward Minimal API protection with Swagger support, helpful for small services that need quick API key security.
-
On why devs from other languages find Authentication in .NET the most difficult part
Medium Issue #444
Authentication in .NET can feel alien if you come from lighter frameworks, and this translator-style framing is sensible.
Archive
Page 1 of 8
Newest first
-
I Need My CI/CD Pipeline to Access Cosmos DB Without Using a Secret
Microsoft Dev Blogs Issue #544
In the last post we walked through
-
7 Authentication Concepts Every Developer Should Know: From Basic Auth to OAuth2 and OIDC
C# Corner Issue #544
A beginner-friendly, diagram-backed walkthrough of the seven core authentication concepts every developer should understand from Basic Auth and sessions to JWTs, OAuth2, and OpenID Connect/SSO with re...
-
Microsoft Tenants
YapCast – Jesse Liberty Issue #540
What is an Azure tenant (Microsoft Entra ID tenant) — and what is it used for? tl;drAn Azure tenant — now called a Microsoft Entra ID tenant — is a dedicated, isolated instance of Microsoft’s identity...
-
Using the .NET .http file to test native auth in Entra External ID (EEID)
Medium Issue #539
The .http docs are here. Continue reading on The new control plane »
-
A Small HTML Attribute That Makes MFA Much Better
Medium Issue #538
Discover how one HTML attribute can make MFA faster, simpler, and more user-friendly in your .NET applications.
-
Using the .NET .http file to test native auth with SSPR in Entra External ID (EEID)
Medium Issue #537
SSPR = Self-service password reset. Continue reading on The new control plane »
-
Send Gmail Emails from ASP.NET Core Using OAuth 2.0, Refresh Token and MailKit
C# Corner Issue #534
Learn how to send Gmail emails from ASP.NET Core using Google OAuth 2.0, refresh tokens, MailKit, MimeKit, and Gmail SMTP without storing a Gmail password.
-
Passkeys in ASP.NET Core 10
C# Digest Issue #534
how registration and sign-in actually work under the hood
-
How can we implement Asp.net Identity in azure function.
Medium Issue #532
This article is about how can add identity in azure function api and what are the key features that we can leverage from identity.
-
We built a modular CMS and deliberately did not make the modules plugins
Medium Issue #531
BarakoCMS is a .NET headless CMS with thirteen optional modules: accounting, semantic search, feature flags, file storage, social sign-in…
-
How to implement HMAC authentication in ASP.NET Core - InfoWorld
infoworld.com Issue #530
How to implement HMAC authentication in ASP.NET Core InfoWorld
-
ASP.NET Core: JWT Authentication and Authorization
towardsdev.com Issue #528
-
Use Aspire to implement and deploy the BFF security architecture
Software Engineering Issue #527
This blog demonstrates how to use Aspire to set up a solution for developing and deploying an ASP.NET Core web application with Auth0 as the identity provider and a downstream API. The application use...
-
The Lazy Engineer’s Blueprint, Part 7: Security
Medium Issue #526
Part 7: authenticate a person or a machine, project the caller into a module without the host, and authorize with policies off the handler.
-
Stopping copy-paste of Frontegg auth across 15 .NET services
Medium Issue #525
We had a simple goal: around a dozen .NET applications on our platform needed to integrate with Frontegg, and nobody wanted to implement…
-
PostgreSQL 18 OAuth Authentication with ASP.NET Core Identity
C# Corner Issue #524
PostgreSQL 18 OAuth integrates with ASP.NET Core Identity for secure database authentication, enhancing layered security without replacement.
-
Implement BFF using Auth0, Angular and ASP.NET Core
Software Engineering Issue #523
This post should how to implement a web application which needs secure access and secure identities. The application uses Angular as the UI tech, ASP.NET Core as the backend tech and a backend for fro...
-
Building Secure and Scalable Multi-Tenant SaaS Applications with .NET and Angular
C# Corner Issue #520
Learn how to build secure and scalable multi-tenant SaaS applications with .NET and Angular, covering tenant isolation, database architecture, authentication, scalability, monitoring, and DevOps.
-
Authorization Code + PKCE in .NET 10: Securing Angular, Gateway, and Downstream APIs
C# Corner Issue #519
Secure Angular & .NET 10 apps with Auth Code + PKCE. Protects SPAs, Gateways, and APIs for robust enterprise security.
-
Modern authentication in ASP.NET Core with 2FA and passkey
elmah.io Blog - .NET Technical tutorials/guides and new features Issue #519
This walkthrough builds a .NET 10 ASP.NET Core Web API (TwoFaNET10) implementing two-factor authentication and WebAuthn/FIDO2 passkey login, using Microsoft.AspNetCore.Identity.EntityFrameworkCore wit...
-
Implementing JWT Authentication with Secure Refresh Tokens in .NET Core
C# Corner Issue #519
Implement secure JWT authentication with refresh tokens in .NET Core. Learn to generate, validate, and refresh tokens for stateless API security.
-
Google and GitHub login without leaking tokens: external OAuth behind your own JWTs
Medium Issue #518
You want “Sign in with Google” and “Sign in with GitHub.”
-
ASP.NET Core 10 Authentication & Authorization Best Practices
C# Corner Issue #517
Master ASP.NET Core 10 authentication & authorization best practices. Secure your APIs, protect user data, and build production-ready applications.
-
JWT Session 14: Implement Refresh Token Authentication in ASP.NET Core Web API
C# Corner Issue #515
Enhance ASP.NET Core Web API security with JWT refresh tokens. Learn to implement long-lived refresh tokens for seamless user authentication and improved UX.
-
Understanding the Role of Microsoft Entra ID in Microsoft Intune
C# Corner Issue #515
Discover how Microsoft Entra ID powers Intune for secure device management, user authentication, and policy enforcement for your organization.