ASP.NET Core: Token-Based Authentication

Learn about authentication and authorization, traditional and token-based authentication, and how to set up this new authentication mechanism in .NET Core applications.

Introduction

• Why use exception token-based authentication?
• What you should know

1. Getting Started with Authentication

• Authentication vs. authorization
• Cookie-based vs. token-based authentication
• What is identity platform?
• JSON Web Token

2. Token-Based Authentication

• Setting up Entity Framework Core
• Adding default identity tables using EF Core
• Configuring token-based authentication
• Adding the authentication controller
• Registering new users using UserManager
• Logging in users
• Generating an access token
• Adding the RefreshToken table
• Generating and storing refresh tokens
• Injecting TokenValidationParameters
• Refreshing expired tokens

3. Role-Based Authentication

• Seeding the database with roles
• Adding role claims to tokens
• Adding role authentication to a controller
• Adding multiple roles to a controller

Conclusion

• Next steps for learning more token-based authentication