Bharat Dwarkani Oct 19, 2019

bookmarks

So you’ve built a web API and everything seems to be working fine. But Wait! Anyone can access your API, hit the correct url and boom your API is connected to. Though that might be heroic of you, but it shouldn’t be… I mean after all the bugs and stackoverflow.

Bharat Dwarkani Sep 15, 2019

bookmarks

As of version 5.5, Microsoft’s IdentityModel library now supports the signing of JSON Web Tokens using the RSASSA-PSS (Probabilistic Signature Scheme) digital signature algorithm. This is great news if you’re looking to start building .NET Core systems that implement OpenID’s Financial-grade API and Open Banking, where PS256 should be used for signing.

Bharat Dwarkani Aug 30, 2019

bookmarks

A practical tutorial showing how to use JSON Web Tokens in ASP.NET Core 2 applications.

Bharat Dwarkani Aug 21, 2019

bookmarks

Authentication via a JWT is pretty much standard practice these days and there are lots of blog posts and sample code showing how to do this in ASP.NET Core. However, what if we are implementing a multi-tenant API and want the JWT signing key secret to be different for each tenant? In this post we go through how to implement a multi-tenant JWT.