Token Based Authentication in Dotnet Core 3.0

APIs are now the standard for building and integrating modern applications.  It also evolved as the key enabler in conducting risk-free legacy modernization and they become engines of innovation.  In addition, exposing the services via APIs allows organizations to reach a larger audience, expand into new areas, and reuse existing assets.  Providing security to these APIs is one of the main concerns.  In this post, we will talk about using Token Based Authentication in Dotnet Core.

Okay, some may ask – Explain this in simple terms

In Basic Authentication, an HTTP user agent must provide the username and password to get through the authentication process.  The API is responsible for the authentication by validating the credentials against a list/table. 

Token-based authentication is stateless.  The token is used to send information that can be confirmed and trusted by means of a digital signature.  The authentication mechanism is decoupled, and User related data are not managed by the API. 

Please visit the following link for more details.

https://www.blogofpi.com/token-based-authentication-in-asp-net-core/