How to implement role based authorization in Blazor Server apps

[@jacobangel1411]

Great series, it's the only good one I have found on KZbin. Keep up the great work! Edit: you should do a video about 3rd party authentication like Google, Microsoft, Facebook, etc.

[@Codewrinkles]

That will also follow :)

[@quincintchristian2681]

@@Codewrinkles Anxiously awaiting

[@RomanNorman]

Fantastic series on authentication, cheers!

[@felipeabajo]

Wonderful explanation!! I've been able to implement it so smoothly. Thank you

[@Codewrinkles]

Glad it helped!

[@1eagleusa]

Great tutorial. I have a couple questions though. First, is it possible to use a mixture of Identity and AD authorization? In the previous video's comments you give an example of how to add a claim for an AD group but what if the users are placed in the Identity tables and the Admins are in the AD. Was thinking about checking if the user is in the AD group then adding as a user with the claim and role of admin but if there is a more efficient way that would be better. Basically, is it possible to add the AD group as a role instead of a claim for the AD group or would it be better to have 1 role with several user claims and an admin claim . Second, in a couple of the videos you mention that in the next video you will show how to do the links for login and logout but never do. This would be easy to see if the code was available but I do understand. However would like to know how that is done as well as some of the other features you had not discussed like email confirmation, user lockout, forgot password and other more authorization features. Third, when you added a role and claim there was no check to see if the role or claim already existed. Wouldn't that throw an exception? What is the best way to handle that? Thank you for your time and effort.

[@mrt7948]

please continue this series with password reset and claim/policy setup edit/update

[@Jabby97]

HOw would i make it so i can make already registered users an admin instead of making it on create account?

[@superbchannel3167]

Great job always. Only challenge is, nowhere to download the code/sample projects. You think you can make those available?

[@GavinWMoloney]

Yeah it's mostly useless without it

[@sandroriz]

If we have a Blazor server app (eg. an Intranet) that runs in Lan with Windows Authentication and you want to add Roles based Authorization, is it possible to use all the Microsoft.AspNetCore.Identity features (RoleManager, IdentityRole, AuthorizeView with Roles, etc.)? With custom tables (eg. Employee with domainAccount as PK, Roles, EmployeesRoles) or you must implement the aspnet* tables and have an IdentityDataContext?

[@bgrant1512]

How about a video on how to get windows authentication back? How would I get AD role based security to work in a blazor 8 server app ? MS really screwed that right into the ground in Blazor 8. running on IIS I cant even gtet the currently logged in user.