Summary

In this chapter, we understood what authentication is and the key elements of authentication in ASP.NET Core. We explored different options offered by the ASP.NET Core framework and learned how ASP.NET Core Identity helps to quickly add authentication to your application. We discussed OAuth 2.0 and grant flows, and how they make things easy when you need to authenticate and connect to multiple API services. We also looked at configuring Azure AD as your identity service, using external authentication providers such as Google or Facebook in your application, and using Windows Authentication in an ASP.NET Core application. We concluded this chapter by discussing a few best practices to follow while developing server- and client-side applications.

In the next chapter, we will see what authorization is and how it helps to control access to your resources.