JWT AUTHENTICATION In ASP NET Core with Azure AD | Getting Started With ASP.NET Core Series

Hey Friends, I am back with the much asked about video on Authentication. It did take some time to put together and I hope you find it helpful.
When building applications we often want to control access to it. The process of securing your application is commonly referred to as authentication and authorization.
In this video, let's learn how to protect your ASP NET Core Web API using JWT Bearer Token. We will be using Azure Active Directory as our identity provider and see how to integrate with it from our application and how everything works together.
🔗 Blog Post www.rahulpnath.com/blog/jwt_a...
🔗Source Code - rahulpnath.visualstudio.com/D...
🔗Protected Web API - docs.microsoft.com/en-us/azur...
🔗 Microsoft Identity Platform - docs.microsoft.com/en-us/azur...
🔗Token Flows - docs.microsoft.com/en-us/azur...
🔗Implicit Flow - docs.microsoft.com/en-us/azur...
🔗Postman - www.postman.com/
🔗Fiddler -www.telerik.com/download/fidd...
Additional Watching
📹STARTUP CLASS - • THE STARTUP CLASS In A...
📹MIDDLEWARE - • MIDDLEWARE in ASP.NET ...
📹ASP NET Core Series - • ASP.NET Core
Come say hi! ✋
🌍 Blog - rahulpnath.com/
✉ Subscribe to my Newsletter - www.rahulpnath.com/subscribe
🐦Twitter - / rahulpnath
📸Instagram - / rahulpnath
🎥 Recording Setup and Workflow - www.rahulpnath.com/blog/youtu...
Video Edited by my wife, Parvathy 😍
Make sure to SUBSCRIBE to the channel. THANK YOU for helping me grow this channel !!

[@RahulNath]

Hope you all enjoy this video Here is the source code I used rahulpnath.visualstudio.com/DefaultCollection/KZbin%20Samples/_git/jwt-authentication Do drop in your comments!

[@UPSCCSE-ku7ej]

U are awesome buddy ....I am also a Dot net full stack developer. Your video great 🙂👍

[@RahulNath]

Thank you heaps! Glad you like it 😀

[@mdabuzar2130]

We are waiting for next video on Authorization and explicit flow.

[@RahulNath]

@@mdabuzar2130 Thank you. Sure will do one.

[@hotasfireph]

Nice tutorial, but why do I'm having an invalid certificate? also if I used resource parameter, it's said it's not supported.

[@SahanSerasinghe]

Thank you for taking the time to explain this! Really loved the bits you dived into to show what requests are being made under the hood.

[@RahulNath]

Great! Thank you Sahan. Yes, I have always felt that mysterious and never explained anywhere explicitly, which was particularly why dived in to understand a bit of the internals. Glad you particularly called that out. Made that effort paid 😀

[@sojans.r9025]

I like the fact that there is no filler in this video. To the point and precise. Subbed !

[@RahulNath]

Thank you Sojan! Do check out the full series, I'm sure you will like it bit.ly/asp-net-core-series

[@keerthanarani9929]

Great video! Thank you for taking the time to explain the concepts.

[@RahulNath]

Glad you enjoyed it!

[@yuvrajspanwar]

This video is totally up to the mark and straight to the point. Great work Rahul. Thanks

[@RahulNath]

Glad to hear that Yuvraj! Hope you are enjoying the series bit.ly/asp-net-core-series

[@matheusgeorgo]

Great video, thank you very much for the explanation! Such a good concise video, amazing!

[@RahulNath]

You're very welcome Sllan!

[@manishpandey4621]

Hands down the best explanation on the JWT concept. Rahul - you rock!

[@RahulNath]

Happy to hear Manish! 😀

[@jalanubha]

One of the best tutorials on KZbin! Thanks Rahul :)

[@RahulNath]

Most welcome Bhanu. Do check out the full series here kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@robertmrobo8954]

Excellent video, really excellent.

[@somnathroy4875]

Really loved the article. Waiting eagerly for the other flows as well..

[@RahulNath]

Thank you for letting me know. Sure will add on the other flows soon! Meanwhile, you might like my other ASP Net Core videos kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@sawarkarashish]

Thanks for explaining it in the simple and best way... Keep making videos for Azure and.net core

[@RahulNath]

Thank you Ashish, happy you liked it and sure will make more! Do let know if you have particular topics to be covered.

[@niteshratnaparkhe1799]

awesome explanation

[@manishksohni]

Excellent Video Rahul. Very good insight on JWT.

[@RahulNath]

Thank you Manish. You might find the ASP NET Core Series helpful too - kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@tourism8016]

Rahul, Very good video on B2C. Great explanation of the relevant topics. Precise and concise.

[@RahulNath]

Glad you liked it

[@dinhdotdev]

Great video. Easy to understand and follow.

[@RahulNath]

Glad you enjoyed it! Do check out the full ASP Series here bit.ly/asp-net-core-series

[@anandbabu6413]

Very helpful topic and thank you so much for your time.

[@RahulNath]

Glad it was helpful Anand!

[@raymondwilliams8054]

Very detailed and great description, good work my friend.

[@RahulNath]

Thank you very much Raymond! Do check out the full ASP NET Series if you haven't already bit.ly/asp-net-core-series . Looking forward to see you around 😀

[@suraj_ingole0610]

Perfect explanation with simple language. Easy to understand. Thanks for the information

[@RahulNath]

Glad it was helpful! Check out the full ASP Series here bit.ly/asp-net-core-series

[@InfoDefensePlUS]

Thank you for the post. Very well done video

[@RahulNath]

Thank you! Here is the full ASP Series bit.ly/asp-net-core-series

[@MG4Youtube]

This is an excellent tutorial to understand the Azure AD authentication system. Very clear.

[@RahulNath]

Great to hear!!

[@jainithpatel7661]

Really Very helpful for understanding all concept related to JWT

[@RahulNath]

Thank you Jainith! You can check other videos like this in this playlist kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@andremorata]

wonderful job! Congrats!

[@RahulNath]

Thank you very much Andre!

[@kuttikrishnankodoth1463]

Great Videos Rahul .. great content, to the point videos .. Thank you !!!

[@RahulNath]

Glad you like them! Hope you are liking the full series kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@UmeshKumar-ox3zp]

Very detailed explanation. Thank you

[@RahulNath]

Glad it was helpful Umesh! Do check out the full ASP NET Series bit.ly/asp-net-core-series

[@LamLe-cl4he]

Thanks for your video, very clear!

[@RahulNath]

You are welcome, Lam!

[@ksdvishnukumar]

Very well explanation bro... All your videos are worth watching and grad the knowledge... Keep doing good work bro...

[@RahulNath]

thank you, happy that these are helpful!

[@surya-tl3uy]

Thank you for the topic, which I exactly looking for!!

[@RahulNath]

Glad it was helpful! Do check out the full series here bit.ly/asp-net-core-series

[@nesnakboys379]

Wonderful explanation!!!

[@RahulNath]

Thank you , glad you liked it . Hope you are enjoying the ASP Series ?

[@anjanchidige]

Rahul, Awesome. outstanding and confidence in explaining the concept and demonstrating it.

[@RahulNath]

Glad you like it Anjan. Do check the full ASP Series here bit.ly/asp-net-core-series

[@anarheydarli6763]

Very well explained. Thank you, Rahul! Moreover, the instructor has an intonation that makes me listen/watch carefully. First time I haven't got distracted and watched till the end at once :)

[@RahulNath]

Glad you enjoyed it Anar! Do check out other videos in this series here bit.ly/asp-net-core-series I am sure you will like them too!

[@pradumangite795]

Amazing video. This is one of the best videos for .net core around oauth and openid

[@RahulNath]

Super happy to hear that Praduman. Do check the other videos in this series here bit.ly/asp-net-core-series

[@onkarsinghsanuria5426]

Excellent video sir , i solved my issues in auth after watching your video .. thanks man 👍👍

[@RahulNath]

That's awesome and happy to hear. I am sure you will like the other videos in my ASP NET Series. Do check them.

[@sivaramkumar_perumal]

Really helpful. Thanks

[@RahulNath]

Glad it was helpful, Sivaramkumar!

[@betoborda]

Great video. I hope you do more videos about this topic

[@RahulNath]

Yes I have a few planned showing the various different auth flows

[@ankurkumargoell]

Nice video. Cleared my doubts around authentication and authorization.

[@RahulNath]

Glad to hear that - do check out the ASP Series bit.ly/asp-net-core-series

[@hemsingh81]

Great explanation,

[@hemsingh81]

You always smiles two times one when start video while talking about subscribe and same in the end.. 😂

[@RahulNath]

@@hemsingh81 Haha yeah I've noticed that too. The smile somehow disappears when I start talking code. I am otherwise cheerful. 😂

[@ManojKumar-mc5cd]

Here is your another subscriber; Really awesome explanation; Keep doing the good work;

[@RahulNath]

Welcome aboard Manoj! Do check out the full series bit.ly/asp-net-core-series. I am sure you will like it!

[@sanjayi6245]

Excellent Video Man. Wow. Subscribed

[@RahulNath]

Thank you Sanjay !

[@sanjayi6245]

Are you doing another video on Authentication @Rahul?

[@RahulNath]

@@sanjayi6245 Nothing planned yet. What did you want to be covered?

[@abhijoydas4478]

Brilliant. Subscribed.

[@RahulNath]

Awesome, thank you!

[@brushenas]

You are awesome. Great content

[@RahulNath]

Thank you Bruce! Do check out the full series here bit.ly/asp-net-core-series

[@shubhamkoolwal139]

great explanation ..............

[@RahulNath]

Glad you like it Shubham. Do check out my other videos in this series. You might like them!

[@VinothKumar-uw2tz]

Excellent video

[@RahulNath]

Thank you Vinoth. Do check out my other videos in the ASP NET Series, you might like them! kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@moumantimusicalmasti]

It is really helpful..not only this explanation..all your videos are very helpful

[@RahulNath]

Thank you Moumanti !

[@Prog2012]

Thank you very much. I deeply understand jwt token. Thanks

[@RahulNath]

Glad to hear that. Hope you are enjoying the full series bit.ly/asp-net-core-series

[@user-cb4fh1hg5h]

Hi, Rahul. Thanks for this video, it's really very clear explanation about Azure AD. But I have question about acquire silent token and about scopes of Microsoft Graph. How to close with authorization our resource (API's) and why do we need this scopes in Azure AD?

[@malkitsaggu]

Best video on AD Auth.

[@RahulNath]

Glad it helped. Do check out full ASP Series here bit.ly/asp-net-core-series

[@sabutom123]

Great work !

[@RahulNath]

Thanks a lot! Do check out other videos in this series bit.ly/asp-net-core-series

[@gauravparikh1205]

Rahul...you are simply Awesome

[@RahulNath]

Thank you Gaurav! Do check out the full series here bit.ly/asp-net-core-series

[@gauravparikh1205]

@@RahulNath will go through it

[@RahulNath]

@@gauravparikh1205 Let me know if you have suggestions and feedback!

[@gauravparikh1205]

@@RahulNath Thanks Rahul I am running with one problem getting below error in Linux docker "Windows Cryptography Next Generation (CNG) is not supported on this platform" , what is the best mechanism for Cross platform cryptography. Specially I could encrypt in angular and decrypt in C# webapi and more important should run with Docker image in LINUX

[@ArranMaclean]

Great video. Would like to see a Azure B2C version and the differences. Roles/claim in the JWT token, example Admin and User roles.

[@RahulNath]

Great suggestion! thank you Arran

[@NaveenKumar-mr6xi]

i have read lot of things but this video clear alot

[@RahulNath]

That's nice to know. Thank you Naveen. Do check out the full series here bit.ly/asp-net-core-series

[@RoySourav]

awesome

[@RahulNath]

Thank you. Do check out the other videos in this series kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@ldpoulin44]

Great Video ! Still waitng for your video for the access code flow ;)

[@RahulNath]

Thank you Louis! Thank you for the push. I will start working on it soon!

[@mdabuzar2130]

Sir, please make some videos on how to implement Azure service with .net sdks. Like storage account, Azure functions and many more. By the way, you are one of the best teacher available on KZbin.

[@RahulNath]

Thank you Abuzar! So happy that these videos are helpful. I will add these to my list and will keep them coming.

[@pankajbhapkar9401]

very Nice...

[@RahulNath]

Thanks a lot Pankaj! Do check out the full series bit.ly/asp-net-core-series

[@carlandres3319]

Thank you very much!

[@davidonyango1687]

Brilliant

[@RahulNath]

Thank you David!! Do check out the full series bit.ly/asp-net-core-series I'm sure you will like it

[@TheRockynua]

great bhai, to the point

[@RahulNath]

Happy you liked it. You might also like the other videos in the series. You can check it out here kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@dr.amneshgoel1416]

This video deserves the move views and likes. Good job, Rahul!!

[@RahulNath]

Thank you Amnesh. Such positive comments are encouraging!

[@dr.amneshgoel1416]

@@RahulNath I did a POC around DbUp as you suggested earlier on twitter. POC was awesome and everyone liked it. Looks like I'm becoming a fan of your videos. You are an Awesome Man.

[@RahulNath]

@@dr.amneshgoel1416 That's so good to hear and glad you liked DbUp. Do let me know if there are any particular areas you are looking for and I can try and cover them.

[@dr.amneshgoel1416]

@@RahulNath I'm good for now and thanks for checking. I had tweaked the scripts folder structure to make it more cleaner like DDL, DML etc., just to separate sql scripts in different folders. Overall I'm good there.

[@RahulNath]

@@dr.amneshgoel1416 Great!

[@finwwwfinwww4669]

Thanks for the awesome video

[@RahulNath]

Thanks for watching!

[@ahmadalbaz6059]

nice explanation Rahul subscribed and waiting for the video about the authorization code flow

[@RahulNath]

Thank you Ahmad! Yes need to start working on that video 😀

[@TellaTrix]

Wow it's very unique content over the KZbin.

[@RahulNath]

Thank you and happy you like it.

[@maheshlakshmanan8061]

Great, Thanks you!

[@RahulNath]

Thanks Mahesh 😀

[@jyotirmoymaschatak5960]

Just WOW!

[@RahulNath]

Thank you! Hope you are liking the full series bit.ly/asp-net-core-series

[@boggybayouboy]

This is great!

[@RahulNath]

Great to see you enjoying the videos! The full ASP NET Series is here bit.ly/asp-net-core-series

[@ananthganesh8754]

Very good tutorial Rahul. If you could kindly create a video with a front-end application for obtaining the token and then passing to WebAPI, it will be very useful.

[@RahulNath]

Glad you liked it Ananth. Sure will that's on my backlog list. Slowly catching up 😀

[@camping29]

Nice one! easy to understand but I love to see more diagrams for the explanation details. Also love to hear more about best practives for JWT auth based on your own experience @rahul

[@MrRavi188]

Great Explanation. Thank you. I have a query :- Is there any sample available for converting existing MVC Application from form authentication to Azure AD authentication

[@RahulNath]

Thank you Ravindra, glad you like it. I am not sure of any such sample.

[@gouthamk7759]

Perfect 👌

[@RahulNath]

Thank you Goutham for letting know!

[@dhanrajpatil1036]

Bhai..❤ u got a subscriber

[@RahulNath]

Thank you - Check out the full ASP Series here bit.ly/asp-net-core-series

[@amitkandpal762]

Hi Rahul, thank you for the awesome tutorials. Your tutorials are easy to understand and has cleared my doubts. Could you please make a video on jwt refresh tokens and implementing it in live application. Once token generated how to store it and use it multiple times.

[@RahulNath]

Great suggestion Amit - Yes I have one in my list to record!

[@storycafe6183]

You are doing a very great job. I'm following all your videos one by one. Keep it up bro. Can you please share the Other part of Remaining Authentication and full video on authorization .

[@RahulNath]

Thank you and happy you liked this. Unfortunately I haven't made the second video yet. Here's the full ASP Series bit.ly/asp-net-core-series

[@sanjayramadugu8779]

Thank you for making this video. did you make a video on using authorization code flow as you mentioned in the video?

[@RahulNath]

Unfortunately not Sanjay! That one is still pending 😀

[@joyjk.]

very nice video

[@RahulNath]

Thanks Joy. Do check out the full series bit.ly/asp-net-core-series

[@joyjk.]

@@RahulNath Brother could you please help me to with windows server active directory? Thank you

[@RahulNath]

@@joyjk. haven’t been doing anything with ad these days - what are you stuck with ?

[@joyjk.]

@@RahulNath Brother, Can I mail you? Could you please give me your email? I replied several times but youtube deleted it.

[@RahulNath]

sure mail details in about page 👍[e-mail]

[@srinivasdasari5592]

Enjoying your videos Rahul. Very nice!!! Can you please extend this video by securing Microservices through Azure API Management, Azure AD and authorizing APIs using role based access control.

[@RahulNath]

Great suggestion Srinivas! Thank you

[@martink4975]

Clean!

[@RahulNath]

Thank you, Martin!

[@shashikantpawar7069]

Thank you great content ... Can u make a real time application with all the concept you talked in all video ..it will help alot ..just a suggestion

[@RahulNath]

Thank you Shashikant for the suggestion. It's very valid. Yes I do plan to do a real time application covering all these concepts some time. It was my original idea too. Once I cover most of the basic building blocks I'll start doing such videos. (Also it needs a lot more effort 😀)

[@stasmashkovich88]

Hi Rahul, great video, do you have an example using Net core 2?

[@RahulNath]

Glad you like it, Stas. No, I don't have any on .net core 2. Any issue you are facing? The overall flow is similar in there too, except for the libraries used. Also, think .NET 2 is nearing its EOL dotnet.microsoft.com/platform/support/policy/dotnet-core

[@anurag3487]

Subscribed. Very informative. Very few people use Rider though. :)

[@RahulNath]

Thank you Anurag. Haha yeah true. I got a free subscription and started trying it out and like it. Main advantage is how easily I can go into the implementation of framework libraries.

[@anurag3487]

@@RahulNath I hoped for a Community edition of Rider but it isn't available. The trial version I suppose is only valid for 30 odd days. Having said that, Rider looks very cool and rich features oriented.

[@RahulNath]

@@anurag3487 Yes it is great IDE. They used to have Early Access Program, but looks like it's closed now www.jetbrains.com/rider/nextversion/

[@sudhiniv]

Excellent video sire! what is the multiline vscode extension that you were using?

[@RahulNath]

Thank you Vikram. I use the built in VSCode feature code.visualstudio.com/docs/editor/codebasics#_multiple-selections-multicursor Is that what you are looking for?

[@nisansalanayanajith7710]

Which is the best from AAD and OAuth ? .. Can you do a tutorial contrasting these two.

[@Lunolux]

nice, thx

[@sid0000009]

can we have the Oauth client on-prem or is should be in Azure for it to be registered in Azure AD? Thanks! ( very clear explanation )

[@RahulNath]

The user must have credentials to login and should be registered in AD. But can access it from any where.

[@rahulchaurasia5560]

Hi Rahul, Lots of learning from your videos... leaving a question for you.. What can be done if tokens are compromised?

[@RahulNath]

Happy you are liking it Rahul. Check out how you can revoke tokens docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-revoke-access?WT.mc_id=AZ-MVP-5003875 Also do read about token lifetimes in general docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes?WT.mc_id=AZ-MVP-5003875 Let me know if that answers your question.

[@rahulchaurasia5560]

@@RahulNath Thanks Rahul :)

[@mayureshs80]

Nice explanation. Ironic, that the release is just a day after it had an outage. Btw, what font do you use in VSCode ?

[@RahulNath]

Thank you Mayuresh. Yeah perfect timing 🤣 I am using UbuntuMono NF currently. Might switch to Jetbrains Mono. Which one do you prefer using?

[@mayureshs80]

@@RahulNath I like Dank Mono. I will try this one.

[@chistysohailful]

Really helpful, can you pls make a similar one for Azure Function HTTP triggered Function App, could not find any on that topic, Thanks

[@RahulNath]

Thank you for the suggestion Sohail. I have added it to my list, will make one. Between do checkout the other videos in this series kzbin.info/aero/PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

[@mariodgh]

Excellent video. Are you planning to make any Authorization code flow video? :)

[@RahulNath]

Glad you like it Mario. Yes I do plan to make a few follow up videos around the different Authorization scenarios. Can't promise a date yet though (needs a bit more reading to be done 😀)

[@murugarajuperumalla5508]

Awesome, keep it up and thanks a lot

[@RahulNath]

Most welcome Murugaraju!

[@sameerpawar5339]

Hi Rahul,Thanx for sharing knowledge. Can you please create video on JWT authentication in .net with AWS API gateway

[@RahulNath]

Thank you Sameer for the feedback. Did you have any particular Identity Provider in mind? What do you use on AWS instead of Azure AD?

[@shekharshinde2391]

Thanks sir, great video ✌🙏 Wo paji kabhi has bhi liya karo😃

[@RahulNath]

Thank you Shekhar! 😀Do check out the full series here bit.ly/asp-net-core-series

[@freake14marut]

Thanks for the tutorial.One issue i am facing ..i am getting the token generated in response but the token in not validated when making get request in post .It returns 401.

[@dkshaw6994]

Thanks

[@RahulNath]

Welcome and do check out the full series here if you haven't already bit.ly/asp-net-core-series

[@user-kr5pp4rc2s]

Hi Rahul This is gr8 understanding, Thanks., I need your help in way, like I have old application which used microsoft Identity for user management, Now My requirement is to upgrade application and bring to cloud using Azure. now I need to work on User management section using Azure AD B2B integrated, So how use existing usermanagement or completely need to create new. and What we have to do of existing Identity tables like aspnetusers,aspnetrole ectc. please suggest video where I can get help to inegrate end to end userlogin logout in webappilcation and authorization in webAPI as well I'm using .net 7.0.

[@comatosetorpor3602]

early morning person 4:37 :()

[@RahulNath]

Yes quietest time in my house. Wrote more about it here twitter.com/rahulpnath/status/1393992168579104773?s=20

[@whooomzoilo4833]

Good. Please make a ROPC tutorial with Web API.

[@RahulNath]

Glad you like it and thank you for the suggestion. Added to my list, but not sure by when.

[@aliqureshi7171]

Can you plz consume the WebAPI into the Web Application and do the same as you have done using Postman tool

[@RahulNath]

Great suggestion Ali. Yes, I have a video planned on that side and showing the different libraries available and how that works. Still working on it. Thank you for watching this.

[@krishnapandey729]

thanks, I followed what you did and it worked. but when I replaced the auth endpoint to v2 its not working, only v1 is working with the way showed.

[@RahulNath]

I talked about this at around 10:00. Did you try fixing the configuration? Try debugging the token you are getting in jwt.io and see if you are able to find any differences.

[@supsd4486]

Hello @Rahul, could you please make a video on how to consume API which has JWT authentication?

[@RahulNath]

Great suggestion - yes I have that in my list! Hope you are liking the series bit.ly/asp-net-core-series

[@dracomalfoy1245]

this guy's intelligence is borderline scary.

[@RahulNath]

Guessing you liked the video - thank you 👍

[@RogueCoder7505]

Hello good sir. When will you cover the authorization code flow approach? It's been two and a half years since you made this video😭

[@mohramzi5836]

I try this and works fine when login by paste the URL directly to the browser. But it fails to validate token when using Angular (SPA) where the token is sent by the Angular app. Any suggestions?