ASP.NET Core Authentication Articles, Tutorials & News
ASP.NET Core Authentication articles, tutorials, and news from the DotNetNews archive.
156 articles Updated
Start here
Editor picks for Authentication
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Passkeys keep moving from nice-to-have to baseline. Good starter piece for WebAuthn in ASP.NET Core.
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com Issue #492
Local auth emulation is exactly the kind of thing that saves time and reduces environment friction.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh.com Issue #477
Refreshingly production-minded guidance on API keys, including storage, hashing, and pipeline integration choices.
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
youtube.com Issue #474
Entra ID auth in ASP.NET Core and Aspire gets easier with AI assistance.
-
Building JWT Authentication with React + ASP.NET Core Web API
medium.com Issue #465
Straightforward full-stack auth coverage for teams wiring React to an ASP.NET Core API.
-
The simplest way to secure a Minimal API (With Swagger)
roundthecode.com Issue #445
Straightforward Minimal API protection with Swagger support, helpful for small services that need quick API key security.
-
On why devs from other languages find Authentication in .NET the most difficult part
medium.com Issue #444
Authentication in .NET can feel alien if you come from lighter frameworks, and this translator-style framing is sensible.
ASP.NET Core authentication from the DotNetNews archive, curated for .NET developers who already ship production code. This is a reading list pulled from daily issues, not a substitute for the official docs on ASP.NET Core Authentication.
Use Start here for the editorial shortlist, then browse Latest or the full archive when you need more depth. Coverage leans toward .NET authentication, ASP.NET Identity, JWT authentication ASP.NET Core. Recent pieces worth opening: “Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe” and “Cross-service auth without a shared secret: JWKS dual-fetch”.
Every item links out to the original publisher and back to the DotNetNews issue where it ran.
Latest
Newest Authentication from the archive
-
Implementing Passkey Authentication in ASP.NET Core Applicationsc-sharpcorner.com Issue #502
-
How does your domain know your user?medium.com Issue #498
-
How to Secure APIs with OAuth 2.1 and OpenID Connectc-sharpcorner.com Issue #498
-
Identity API Endpoints in ASP.NET Core: When to Use Them (.NET 10)codewithmukesh.com Issue #497
Archive
Page 1 of 7
Newest first
-
Password hashing done right: PBKDF2-SHA512, 600k iterations, timing-safe
medium.com Issue #504
Storing a password is a solved problem, and almost every breach headline is someone who solved it the wrong way. Here are the four…
-
Cross-service auth without a shared secret: JWKS dual-fetch
medium.com Issue #502
When you split a monolith into services, the easy answer is to copy the JWT signing secret into every validator. That is also the answer…
-
Implementing Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #502
Implement secure, passwordless passkey authentication in ASP.NET Core. Leverage FIDO2 & WebAuthn for enhanced security and user experience.
-
How does your domain know your user?
medium.com Issue #498
Almost every business application needs to answer a question that sounds simple: who is the current user? But “user” isn’t one thing…
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
Identity API Endpoints in ASP.NET Core: When to Use Them (.NET 10)
codewithmukesh.com Issue #497
MapIdentityApi gives you register, login, and refresh for free in .NET 10. Here is exactly when to use Identity API endpoints and when to roll your own.
-
Static Web Apps CLI: local authentication emulation with ASP.NET
johnnyreilly.com Issue #492
The Static Web Apps CLI has a local authentication emulator. This is a useful tool for local development, and can be used with ASP.NET authentication. This post shows how.
-
How to Implement Passkey Authentication in ASP.NET Core Applications
c-sharpcorner.com Issue #491
Implement secure passkey authentication in ASP.NET Core apps. Enhance security & user experience with WebAuthn & FIDO2.
-
How Hidden Security Vulnerabilities Turn Into Business-Critical Incidents in Modern Applications
medium.com Issue #490
Security is a board-level concern. IBM’s latest breach report puts the global average cost at $4.4 million per incident ($10.22 million in… Continue reading on Emerline Tech Talk »
-
AI Security Testing: How to Validate Prompts, Models, and Tool Calls
c-sharpcorner.com Issue #489
Secure your AI systems! Learn to validate prompts, models, and tool calls for LLMs, RAG, and agents in .NET.
-
ASP.NET Core Identity with JWT Authentication - Step-by-Step Practical Guide
c-sharpcorner.com Issue #485
Master ASP.NET Core Identity & JWT for secure user registration, login, and role-based API authorization. A practical step-by-step guide.
-
Human Resource Management System in ASP.NET Core MVC
c-sharpcorner.com Issue #484
Build a Human Resource Management System (HRMS) in ASP.NET Core MVC. Covers setup, authentication, Admin, and Employee modules for efficient HR operations.
-
How to Build Custom MCP Servers in C# for Enterprise AI Applications
c-sharpcorner.com Issue #478
Learn how to build custom MCP servers in C# for enterprise AI applications. Discover MCP architecture, security best practices, tool development, authentication, and real-world integration patterns.
-
API Key Authentication in ASP.NET Core (.NET 10) - Complete Guide
codewithmukesh.com Issue #477
Production-grade API key authentication in ASP.NET Core .NET 10. Hashed keys, DB-backed store, AuthenticationHandler, decision matrix, full source repo.
-
Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph
damienbod.com Issue #475
Configurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks at i...
-
ASP.NET Community Standup: Simplifying Entra ID authentication with AI
youtube.com Issue #474
Join Jean‑Marc Prieur and Kyle Marsh to see how AI can streamline Entra ID authentication in ASP.NET Core and Aspire apps. We’ll explore using AI to set up app authentication, enable calls to protecte...
-
Implementing OAuth 2.0 and OpenID Connect in ASP.NET Core
c-sharpcorner.com Issue #473
Learn how to implement OAuth 2.0 and OpenID Connect in ASP.NET Core. Secure applications with authentication, authorization, tokens, and Single Sign-On.
-
Lost ASP.NET Identity Cookies on IIS Application Pool Restarts
weblog.west-wind.com Issue #472
Last week I finally updated my blog and moved it to .NET 10 from the ancient WebForms based engine I built 20 years ago. The app is deployed onto a Windows server running IIS and I ran into a snag rel...
-
JWT Authentication in ASP.NET Core - A Complete .NET 10 Guide
codewithmukesh.com Issue #471
Implement JWT authentication in ASP.NET Core .NET 10 - generate signed tokens with JsonWebTokenHandler, secure Minimal API endpoints, and add role-based authorization.
-
RestSharp in Practice (Part 2) POST, PUT, DELETE, and JWT Authentication
medium.com Issue #471
RestSharp in Practice (Part 2)
-
Refresh Tokens in ASP.NET Core - A Complete .NET 10 Guide
codewithmukesh.com Issue #471
Implement refresh tokens in ASP.NET Core .NET 10 - token rotation, reuse detection, revocation, and where to store them, built on top of JWT authentication.
-
Lost ASP.NET Identity Cookies on IIS Application Pool Restarts
weblog.west-wind.com Issue #467
Last week I finally updated my blog and moved it to .NET 10 from the ancient WebForms based engine I built 20 years ago. The app is deployed onto a Windows server running IIS and I ran into a snag rel...
-
Building AutoStack.Identity: A Zero-Dependency .NET 10 Library for SAML 2.0, JWT, and XML Signing
medium.com Issue #466
The Problem That Started This
-
Building JWT Authentication with React + ASP.NET Core Web API
medium.com Issue #465
Authentication is one of the first real-world features most developers build when creating full-stack applications. In this article, we’ll…
-
Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph
damienbod.com Issue #457
Configurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks at i...