JWT Authentication in ASP.NET Core 7 Web API

[@MOHITYADAV-vk5xk]

Hindi me dot ke liye sabse acchi video ❤

[@tech_yatra]

Thanks brother, keep supporting

[@techyoutube6625]

Very well explained, better than many English channels

[@tech_yatra]

Thanks for your kind words

[@vivekgujari9118]

Nice explanation.

[@tech_yatra]

Thanks Vivek.

[@soumenmondal38]

sir your explanation is very workable in my project. Please send me how to inject AES algorithm in this project if possible. It will be very helpful to me thank you

[@SanjaySharma-s2d]

Well explained, could you please explain it using stored procedure and password hashing

[@tech_yatra]

Sure I will make a video on this soon.

[@kiran-bobade]

very nicely expalin sir..best on you tube for .net

[@tech_yatra]

Thanks for your kind words. 🙏❤️😊

[@asifjamal-m8g]

very informative. excellent

[@tech_yatra]

Glad it was helpful!

[@pieceofcode_]

good explanation. I have a query regarding where to use? 1. If we use gRPC, are we not repeating model information? one in our .NET or Java application and same model in proto buff file? 2. If I use in in Authentication api, so is flow like below Ocelot -> Authentication Microservice -> gRPC client code -> gRPC server ?

[@tech_yatra]

Thanks for your question! Yes, in gRPC, the model is defined twice - once in your .NET/Java app and once in the protobuf file. The protobuf helps in fast and efficient communication between services, even if it seems like repetition. Your flow looks correct: Ocelot -> Authentication Microservice -> gRPC client -> gRPC server.

[@GauravSrivastava2609]

Well explained viseo, could you please make Refresh JWT Token video also. Or if you already make please share video link. Thanks

[@tech_yatra]

Sure this is in my list

[@Aman-ih8ub]

Very good Explanation!

[@tech_yatra]

Glad it was helpful!

[@Datta3]

The POST API is not working in Postman. Are there any default settings required for Postman? I am passing the token, but it's not working. When I remove the Authorization attribute from the employee endpoint, all APIs work in both Swagger and Postman.

[@pwn16]

nice keep uploading videos

[@tech_yatra]

Thank you, I will

[@alisalim723]

very very prefect

[@tech_yatra]

Thank you for your kind words. ❤️

[@user-et6wu8vr9y]

Hello Nishant, Very well explained , thanks for this. Can you please tell me how can we get the Jwt to configure in Appsettings.json file, how did you get that key ,issuer and audience?

[@tech_yatra]

This information will be used later to generate a JSON Web Token. Note that you can give any name to this section you want. You can use www.random.org/strings to generate random strings. Make sure you are not doing this for production

[@tech_yatra]

If you have any other questions feel free to ask. Thank you

[@user-et6wu8vr9y]

@@tech_yatra : Yes please, I want to know how you got this values of Key, Issuer, Audience. Please guide me. Its very grateful you saw my message and responding. "Jwt": { "Key": "Yh2k7QSu4l8CZg5p6X3Pna9L0Miy4D3Bvt0JVr87UcOj69Kqw5R2Nmf4FWs03Hdx", "Issuer": "JWTAuthenticationServer", "Audience": "JWTServicePostmanClient", "Subject": "JWTServiceAccessToken" }

[@ayushchourasiya4616]

@@user-et6wu8vr9y Have you get this solution how did he get that values of key, issuer, audience...???

[@user-et6wu8vr9y]

@@ayushchourasiya4616nope, Those are random itseems

[@jatinvyas2999]

Hello, Apne jo Jwt key, issuer,audience and subject likha setting file me, vo muje kaja se milega?

[@akc1308]

nice tutorial 🤘

[@tech_yatra]

Thanks 🙏👍 kindly like share and subscribe.

[@ketanparab7462]

Could you please create video on refresh token?

[@tech_yatra]

Sure I will create

[@chinmaykshah]

very informative. can you try to make video on auth0?

[@tech_yatra]

Sure, the next video is on auth0, and will be uploaded on the weekend. Thanks for your kind words 🙏☺️

[@chinmaykshah]

@@tech_yatra Hi,when are you planning to upload auth0 video?

[@asifjamal-m8g]

Hi Nishant how r u. pls help Employee data which we are getting by consuming this api as in video and HOW we post it into another api Employee table whose column are different from out db employee column? how we mapp out employeeModel and other api employeeModel.

[@tech_yatra]

To map Employee data to another API with different columns, use a mapping library like AutoMapper. Define a mapping between your EmployeeModel and the target API's EmployeeModel. After mapping, use HttpClient to send a POST request to the other API with the mapped data. Feel free to ask if you have more questions!

[@ketanparab7462]

Excellent explanation 🎉

[@tech_yatra]

🙏 Thanks 👍

[@ketanparab7462]

@@tech_yatra thank you for your reply sir. Your explanation is very easy to understand. One request to you, Could you pleae make video on microservices in c# like API gateway Authorization and authentication microservices Comunicate microservices each other

[@tech_yatra]

Sure, I will make.

[@josbexerra8115]

muchas gracias Mister muy bien explicado......

[@tech_yatra]

Me alegro que te guste esto. muchas gracias por tus amables palabras.

[@pisht1998]

How do we validate this token i mean what if we make change in this generated token how we know that this is not the correct token

[@kakdiyaamit6625]

hum Userwise database create karke. connection string change kar sakte hai login time par?

[@mohrahulrathi3669]

Thanks

[@tech_yatra]

🤗

[@franciscoprazzio225prazzio]

❤

[@SanjaySharma-s2d]

Please explain how to consume this web api

[@tech_yatra]

Sure, I will

[@poojatarge2580]

How to generate key dynamically.. here we are hardcoding which is not secure

[@tech_yatra]

Thanks for your comment! Generating keys dynamically for Jwt authentication in .NET 7 Web API is a great consideration for improved security. To achieve this dynamically, you can explore using a secure key generation mechanism, perhaps leveraging libraries like System.Security.Cryptography. I appreciate your emphasis on security, and I'll definitely consider creating content on dynamic key generation in an upcoming video. Feel free to subscribe for updates! If you have any more questions or suggestions, please let me know.

[@MuhammadAliSherserve]

how you created jwt key, issuer, audience and subject json?

[@tech_yatra]

The values for the audience, issuer, and subject in a JWT are typically determined based on your application's context and requirements Issuer (iss): "my-app" Audience (aud): "my-app-users" Subject (sub): "user123" Values: Issuer (iss): "my-app" Audience (aud): "my-app-users" Subject (sub): "user123" Code: javascript Copy code const jwt = require('jsonwebtoken'); const payload = { sub: 'user123', iss: 'my-app', aud: 'my-app-users', exp: Math.floor(Date.now() / 1000) + (60 * 60) }; const secretKey = 'your-secret-key'; const token = jwt.sign(payload, secretKey); console.log(token);

[@AnshuRaj12991]

Bro mera token swagger pe nhi aa rha hai but mai debugger lagaakar check kar rha hu to generate ho rha hai can you explain why did happen bro mai 2 din se try kar rha hu but swagger pe show hi nhi ho rha hai token😢😢

[@AnshuRaj12991]

Issue solved I did only small mistake I use void return type in login action method where I generate token. So token not showing in swagger and thank you nishant bro ☺🙏🙏

[@tech_yatra]

Great Bhai......aapne khud se issue resolve kr liya.... confidence aata hai .....and achha lgta hai .....pls subscribe to the channel and share it with others ☺️

[@AnshuRaj12991]

​@@tech_yatra Ha bhai jab ham khud se apne problems ko resolve karte hai to hame ekk confidence ane lgta hai.... I already subscribed your channel and I will share your channel with friends ...

[@tech_yatra]

@AnshuRaj12991 thank you so much 🙏👍

[@mindset1ark]

Please your make video How to make forget password in asp .net core web api in user?

[@tech_yatra]

Sure I will add this to my list, you will get it soon.

[@ashishingle9298]

Authentication hone ke bad jo JWT token generate hoga use kaha store karna chahiye frontend me take next time protected API ko call karte time use kar sake... Please help me to get answer for this.

[@tech_yatra]

JWT token ko securely store karne ke liye localStorage, sessionStorage, ya httpOnly cookies use kar sakte hain. HttpOnly cookies sabse secure hain kyunki ye XSS attacks se bachata hai. Hope this helps.

[@tech_yatra]

JWT token ko front-end me store karne ke liye, aap localStorage, sessionStorage, ya httpOnly cookies ka istemal kar sakte hain.localStorage aur sessionStorage JavaScript se accessible hote hain jabki httpOnly cookies XSS attacks se bachate hain.

[@ashishingle9298]

@@tech_yatra thanks a lot for replying. Agar ho sake to ek short video is topic pe bhi bana dijiye is topic pe clear information wali video nahi hai. 🙏🏻♥️

[@atulbhandari2786]

Hello sir .token jb expire hota h to phir vo generate kaise hota h ?

[@tech_yatra]

Jab JWT token expire ho jata hai, server-side logic naya token generate karta hai. Yeh process server policies aur client interaction par depend karta hai. Agar kuch aur poochna hai, feel free to ask!

[@atulbhandari2786]

Like agr mai continuously work kr rha hu...token expire time 20 minutes.after 20 minutes kya hoga?

[@tech_yatra]

Refresh tokens are the kind of tokens that can be used to get new access tokens. When the access tokens expire, we can use refresh tokens to get a new access token from the authentication controller.

[@atulbhandari2786]

Thank you sir

[@atulbhandari2786]

Sir I have one question regarding dot net ...how to convert database table result to image format in aap net core web api ?

[@debajyotimohanty7613]

Bhai iska database ka script mil sakta hai kya please?

[@tech_yatra]

I do not have a db script. You can do the migration as I did by following the same steps.

[@vivekkanhekar1991]

Postman me data Get nhi hora h jab test kiya toh

[@tech_yatra]

Agar koi issue hai aap mail pe details send kr dijiye me check krke btata hu

[@vivekkanhekar1991]

Mail Id?@@tech_yatra

[@tech_yatra]

[e-mail]

[@vivekkanhekar1991]

@@tech_yatra I sent you my issue on your mail id

[@RAHULYADAV-ck4vk]

your video are very informative,but I contact with you..plz reply bro🙏

[@tech_yatra]

I am glad you like my videos. Thanks for your kind words ☺️🙏

[@RAHULYADAV-ck4vk]

@@tech_yatra bro Aapse kaise contact kr skte hai..plz reply back🙏

[@tech_yatra]

Aap thi pe bta dijiye ......ki kya puchna hai aapko

[@MuhammadUsman-tn6bi]

sir apki videos dakh dakh k maine apk bohat views barhaye hain kindly kuch paisay meray b bantay hain :D

[@tech_yatra]

Thank you so much Bhai .... Sunkar achha lgta hai

[@tech_yatra]

Bhai abhi to paisy aane suru hi nhi hue hai

[@firdaushalam2067]

Can I talk to you by mob.

[@tech_yatra]

Could you please write here ?

[@ersuresh4488]

Jo main part h es video ka usko sirf copy paste Kiya h no explanation.. so no use of watching this video

[@tech_yatra]

Konsa part aapko samajh nhi aaya mujhe btao ...I will explain you

[@AnandRaj-hq4zv]

Can you share code?

[@tech_yatra]

Kindly check the video description...you will find the repo url there.