ASP.NET Core Identity: Authorization Management

Introduction

• Securing ASP.NET Core apps with authorization
• What you should know

1. Getting Started

• What is authorization?
• ASP.NET Core authorization types
• ASP.NET Core authorization namespaces

2. Simple and Role-Based Authorization

• Authorize and AllowAnonymous attributes
• Adding role checks
• Policy-based role checks

3. Claims-Based and Policy-Based Authorization

• Adding claims checks
• Authorization policy requirements
• Working with authorization handlers
• Analyzing handler results
• Using a func to fulfill a policy

4. Authorization Policy Providers

• Custom authorization attributes
• Using custom IAuthorizationPolicyProvider
• Default policy

5. Resource-Based and View-Based Authorization

• Using imperative authorization
• Writing a resource-based handler
• Injecting and using authorization in a view

Conclusion

• Next steps