OAuth and OpenID Connect in ASP.NET Core Articles, Tutorials & News
OAuth and OpenID Connect in ASP.NET Core articles, tutorials, and news from the DotNetNews archive.
28 articles Updated
Start here
Editor picks for OAuth
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Broad security overview, with OAuth 2.1, OIDC, JWT, and PKCE giving newer API developers a decent map.
-
Implementing OAuth 2.0 and OpenID Connect in ASP.NET Core
c-sharpcorner.com Issue #473
OAuth 2.0 and OpenID Connect essentials for ASP.NET Core auth and SSO.
-
Modernizing .NET — Part 18: OAuth Authentication in ASP.NET Core
medium.com Issue #429
This one is more interesting than the average auth post because it covers migration wrinkles like proxy schemes and redirect handling.
-
ASP.NET Core + JWT + OAuth 2.0 — Authentication Done Right in 2026
medium.com Issue #426
JWT, OAuth, and DI are evergreen topics when teams need secure, maintainable APIs.
-
Implement a secure MCP server using OAuth and Entra ID
damienbod.com Issue #292
OAuth and Entra ID for MCP is a timely combo. security first, but still practical for modern AI integrations.
-
ASP.NET Core delegated OAuth Token Exchange access token management
damienbod.com Issue #138
Practical guide to delegated token exchange in ASP.NET Core, with real-world access token handling patterns.
-
Security layers in .NET9: Harmonizing JWT, OAuth2, and the API Gateway
javascript.plainenglish.io Issue #326
Security becomes manageable when each component has a well-defined job Continue reading on JavaScript in Plain English »
-
LINQ in EF Core Explained: From Lambda Expressions to SQL
benedictodoh.medium.com Issue #384
A useful walkthrough of how EF Core turns LINQ expressions into SQL, which helps when queries behave differently than you expect.
OAuth ASP.NET Core from the DotNetNews archive, curated for .NET developers who already ship production code. This is a reading list pulled from daily issues, not a substitute for the official docs on OAuth and OpenID Connect in ASP.NET Core.
Use Start here for the editorial shortlist, then browse Latest or the full archive when you need more depth. Coverage leans toward OAuth ASP.NET Core, OpenID Connect ASP.NET Core, OAuth2 .NET. Recent pieces worth opening: “How to Secure APIs with OAuth 2.1 and OpenID Connect” and “Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph”.
Latest
Newest OAuth from the archive
- How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
- Implementing OAuth 2.0 and OpenID Connect in ASP.NET Core
c-sharpcorner.com Issue #473
-
How to Secure REST APIs Using OAuth 2.0 and JWT Authentication?c-sharpcorner.com Issue #418
-
Force step up authentication in web applicationsdamienbod.com Issue #384
- Force step up authentication in web applications
damienbod.com Issue #383
Archive
Page 1 of 2
Newest first
-
How to Secure APIs with OAuth 2.1 and OpenID Connect
c-sharpcorner.com Issue #498
Secure your APIs with OAuth 2.1 and OpenID Connect. Learn about authentication, authorization, JWTs, PKCE, and best practices for modern applications.
-
Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph
damienbod.com Issue #475
Configurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks at i...
-
Implementing OAuth 2.0 and OpenID Connect in ASP.NET Core
c-sharpcorner.com Issue #473
Learn how to implement OAuth 2.0 and OpenID Connect in ASP.NET Core. Secure applications with authentication, authorization, tokens, and Single Sign-On.
-
Modernizing .NET — Part 18: OAuth Authentication in ASP.NET Core
medium.com Issue #429
Master the transition to OAuth in ASP.NET Core, from reverse proxy scheme detection to legacy redirect URI handler overrides.
-
ASP.NET Core + JWT + OAuth 2.0 — Authentication Done Right in 2026
medium.com Issue #426
Most .NET auth tutorials show you what works in a demo. This one shows you what survives production — with token refresh, role-based…
-
How to Secure REST APIs Using OAuth 2.0 and JWT Authentication?
c-sharpcorner.com Issue #418
Secure REST APIs with OAuth 2.0 and JWT. Learn authentication, authorization, and best practices for robust API security in modern web applications.
-
Building Modern Web Applications with Angular, .NET, and OAuth 2.0 — Complete Tutorial Series
medium.com Issue #389
Learn how to build secure, scalable enterprise applications using the CAT Pattern (Client, API Resource, Token Service) with Angular 20… Continue reading on Scrum and Coke »
-
Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR
damienbod.com Issue #387
This post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR). ...
-
Force step up authentication in web applications
damienbod.com Issue #384
The post shows how to implement a step up authorization using the OAuth 2.0 Step Up Authentication Challenge Protocol RFC 9470. The application uses ASP.NET Core to implement the API, the web applicat...
-
Force step up authentication in web applications
damienbod.com Issue #383
The post shows how to implement a step up authorization using the OAuth 2.0 Step Up Authentication Challenge Protocol RFC 9470. The application uses ASP.NET Core to implement the API, the web applicat...
-
ASP.NET Core, MAUI, SQL Server vectors
DotNetNews Issue #332
Issue #332 covers API performance, MAUI iOS widgets, EF Core security, JWT claims, LINQ pitfalls, observability, and SQL Server vectors.
-
Security layers in .NET9: Harmonizing JWT, OAuth2, and the API Gateway
javascript.plainenglish.io Issue #326
Security becomes manageable when each component has a well-defined job Continue reading on JavaScript in Plain English »
-
How to Secure Your .NET APIs with OAuth2 and IdentityServer — Without the Headache
medium.com Issue #324
If you’ve ever tried securing a .NET API using OAuth2, you already know how quickly things can spiral from “simple auth” to a rabbit hole…
-
-
Implement a secure MCP server using OAuth and Entra ID
damienbod.com Issue #292
The article shows how to implement a secure model context protocol (MCP) server using OAuth and Entra ID. The MCP server is implemented using ASP.NET Core and uses Microsoft Entra ID to secure the API...
-
Authentication with OpenID Connect & OAuth2 in .NET
medium.com Issue #288
Secure Your Web Apps and APIs with Modern Authentication Flows
-
How do I secure a .NET Web API (JWT, OAuth, Identity)?
c-sharpcorner.com Issue #261
Learn how to secure your .NET Web API using JWT, OAuth2, and ASP.NET Core Identity. Implement token-based authentication, role-based access control, and protect your endpoints with best practices.
-
They Laughed at My “No JWT” Rule — Until Our Breach Post‑Mortem Went Viral (for the Right Reasons)
medium.com Issue #255
Everyone told us we needed OAuth2 and signed tokens. Continue reading on .Net Programming »
-
OAuth 2.0 in .NET — Secure Access Made Simple
medium.com Issue #251
https://medium.com/@karthikns999/oauth-2-0-in-net-secure-access-made-simple-5dc8ee670410
-
Session vs JWT vs OAuth vs SSO Explained with Real C#.NET Examples
medium.com Issue #217
https://medium.com/nerd-for-tech/session-vs-jwt-vs-oauth-vs-sso-explained-with-real-c-net-examples-c1a52e3235d8?source=rss------csharp-5
-
Handling OpenID Connect error events in ASP.NET Core
damienbod.com Issue #217
https://damienbod.com/2025/06/02/handling-openid-connect-error-events-in-asp-net-core/
-
Implement client assertions for OAuth client credential flows in ASP.NET Core
damienbod.com Issue #186
https://damienbod.com/2025/04/21/implement-client-assertions-for-oauth-client-credential-flows-in-asp-net-core/
-
Customizing a single client sign-in using parameters in Duende IdentityServer
damienbod.com Issue #139
https://damienbod.com/2025/02/17/customizing-a-single-client-sign-in-using-parameters-in-duende-identityserver/
-
Use client assertions in OpenID Connect and ASP.NET Core
damienbod.com Issue #139
https://damienbod.com/2025/02/24/use-client-assertions-in-openid-connect-and-asp-net-core/
-
ASP.NET Core delegated OAuth Token Exchange access token management
damienbod.com Issue #138
https://damienbod.com/2025/02/10/asp-net-core-delegated-oauth-token-exchange-access-token-management/