JWT Authorization in ASP.NET Core 2.1 Web API - C#

[@Dartstefan]

hvala senade, ovo je tačno ono što sam tražio !

[@senadmeskincoding]

Nema problema, hvala tebi.

[@МаратНизаев-ч2н]

Thank you for understandable English! Very easy for Russian ear!

[@ATTI0822]

Can't be more simple. Thank you 🔝

[@rudic.yuwono4401]

Thank you very much!! I've been researching how to implement JWT Authorization to no avail. I always had a hard time understanding this on other tutorials online, but in this video I could grasp it all in one playthrough!! Success always for your channel!

[@senadmeskincoding]

Thank you :)

[@priyankabarde6503]

same here

[@pecasuy]

Thanks, this video is the best explanation I've seen, simple, clear, perfect, even for my language in Spanish. I congratulate you and thank you for sharing your knowledge.

[@vontz9887]

Very clearly explained. Good job and thank you!

[@Tolg]

Fantastic, easy to understand demonstration and explanation. I was struggling a bit on how to approach doing this, and now it's crystal clear to me. THANK YOU!

[@senadmeskincoding]

:)

[@CarlosRuiz-zz1ee]

Best explanation ever! so simple

[@priyankabarde6503]

very simple way explained a complex term

[@vbenavides]

What a great explanation, clear, concise, straight to the point, thank you very much.

[@senadmeskincoding]

Thanks. :)

[@adnanertorer4900]

Very clean explanation. Thank you very much!

[@jamesbest2221]

FAN-TAS-TIC Video! This is the best explanation I've seen! Keep those JWT authorization videos coming! :)

[@senadmeskincoding]

Thanks man ;)

[@sothecominternational8973]

Excellent Introduction and explanation. So many other tutorials seem to overcomplicate it and generally trying to sell you their services. Thanks for this. Look forward to your video on Authorising with Policies etc Happy to click on your paypal link when you have one

[@senadmeskincoding]

Thanks.

[@mofidmoghimi581]

You can't imaging how many helpful for me this tutorial. Thanks for this video

[@CodingSquid]

Very nice, thank you. By the way, everything worked perfectly in .NET Core 2.2. No changes required.

[@senadmeskincoding]

Nice to hear that.

[@SridharSathya]

Like your presentation. No fluff about authentication/authorization and straight to the point. Would appreciate if you'd do part-2 with entity framework and or third party (Google/Facebook/etc.) authentication.

[@pecasuy]

I suggest you make a video about authentication with username and password complementing this video that is spectacular.

[@senadmeskincoding]

I will, thanks.

[@AlexandreToledoPerez]

Direct to the point! Great video.

Very descriptive. Thank you

[@defektruke]

svaka cast

[@siddharthrai4282]

You are awesome ... Thanks for making such a informative vedio.

[@michaelr.santos6541]

Bravo! Outstanding video! Thanks for the excellent tutorial!

[@MuhammadAli-df4ed]

Teach complex topic in simple way, thanks.

[@garyfirzon]

Awesome and clear!

[@johnnguyen1655]

Realy appreciate your hard work, very focus and straightforward. It helps alot especially for beginners. Thanks from Vietnam!

[@richardassal7788]

Great job with this video. I just recently came across it. Just a suggestion, it would have been nice to show the [Authorize] at the resolution of the API call. But your example gave me the clue of what I needed to google and find the right answers.

[@huzefajtg3489]

Thank You, very well explained. Also Thank you for the code as well

[@KanarekLife]

You're amazing! I couldn't understand other tutorials about it but you managed to explain it so well that know I understand. Thank you so much!

[@senadmeskincoding]

You are welcome my friend :)

[@vandeljasonstrypper6734]

where have you been all of my life :) THANKS YOU SO MUCH FOR THIS WELL EXPLAINED VIDEO

[@senadmeskincoding]

Thanks.

[@vandeljasonstrypper6734]

@@senadmeskincoding btw I have problem understanding with the meaning of "claim" I happen to need it in SignalR core to identify users can you make video explain it ?

[@giftfelix4848]

Amazing and impactful session. thanks.

[@rogeriooliveira8872]

Simple and very nice.

[@defektruke]

thanks! You should make more videos about this !!!!

[@kolesplace]

Very nicely done. Thank you.

[@crsoftware]

Good job, friend! I understand it even better than other tutorials in my language (Spanish), I could find out much better how JWT works thanks to your explanation.

[@ramsys9906]

Thanks a lot bro. very simple and easy to understand, i think my search ends here.

[@karuppaiahmani3901]

awesome man..

[@Aegisman]

Amazing and simple, all tutorial should be like this, thanks for the effort

[@senadmeskincoding]

Thanks :)

[@muthuraj7686]

Excellent work!

[@vamsi8669]

Hi Many Thanks, This really helped me

[@林辉-n2i]

真是帮了大忙，万分感谢！！！！！！！！！！！！

[@senadmeskincoding]

谢谢:)

[@ievheniiierokhin1677]

very nice example

[@Kakaranish]

Very good tutorial. Thank you man!

[@dioscarr]

Great video. Awesome explanation. very clear!

[@vivek.tiwary]

Awesome video, thank you very much.

[@imikhan83]

You just saved my life... Thank you so much for the video 👍

[@senadmeskincoding]

You are welcome ;)

[@tonyriddle7646]

it was like console version of JWT ... thank you

[@faustogomez7731]

a usefull video, thanks

[@marvinportgas9209]

Awesome demo, thanks bro.

[@developpa1519]

This is what I was looking for. Thankyou.

[@eddyecko94]

Love it brother... I needed that, thank you.

[@senadmeskincoding]

You are welcome, thanks for visiting :)

[@vazhadvalishvili6426]

Great video, thatk you !

[@mhn147]

Great video! i can't thank you enough, thanks

[@senadmeskincoding]

Thanks ;)

[@mearn_ctaftsman]

This is fantastic.

[@javierlansky3893]

Excellent video, Could you explain us how the session expiration time works, how to use the "lifetime expiration validation"? Thanks a lot

[@smartjames003]

Amazing stuff :) thank you very much :)

[@rguere]

Good video my friend!! danke!!

[@nuguestom4223]

really clear and helpful video. Thanks

[@TheCchharles]

Good afternoon, I have a customer in Vue who consumes an api, and implemented the JWT authorization explained in the video. Should I send from my client in Vue the security key to the AuthController? Since watching the video any client that can find out the address of the controller, it can generate the token back to access to the api. Thank you very good video congratulations, I wait for your answer

[@senadmeskincoding]

Hi Carlos, This video was just a demo, in a real-life app you should protect your token generator with another form of authorization. It could be any type that suits you. The unprotected token generator doesn't have purpose.

[@gustavokuze]

It helped me a lot, thanks!

[@강인한-m2j]

Great video! This tutorial is perfect for me. Thanks

[@richardassal7788]

I have another suggestion. Perhaps you can make another video using RSA encryption instead of HMAC. OR perhaps using JWE.

[@SuneelKumar-un9fw]

Thanks sMeskIn,this video really super for beginners and advance level.could please provide full course of ASP.core latest version

[@angeldeathz112]

thx so much master, grettings from chile

[@senadmeskincoding]

You are welcome my friend.

[@vivaleute5141]

Thank you. Tutorial really helps me)

[@Netmonster01]

Thanks for the tutorial. I have something that may help someone down the road. Order matters, I had the app.UseAuthentication(); after the app.UseMvc(); and kept getting a 401 when trying to do a get on an authorized url. It must be like in his example. app.UseAuthentication(); app.UseMvc();

[@photoshopexperts]

Ohh my days thanks for this comment was driving me mad trying to work out why it wasn't working ha

[@pratikgajjar6183]

Awesome video. Thanks a lot. 👃👃

[@yehornedbalo2969]

Thanks!

[@infohpreet]

Awesome👍

[@ariefs1277]

what browser extensions that you used ? to show the json,rawdata and headers ?

[@dilaramavi]

Thank You!!!

[@KevinGarcia-cx4rd]

Thanks very useful

[@prakashkumark2657]

Thanks for the tutorial. I have one doubt. Here you hardcoded the claims of a particular user.In Live applications where there are many number of users, the claims and roles may vary for each.So how to perform that .Thanks in advance for your help.

[@senadmeskincoding]

Hi, that is different kind of functionality, i tried to solve one problem with this video I didn't wanted it to be to big video but in order to add roles defined for certain user you could authorize user via bearer then get his data from db and put roles applied to that user into token. I coukd create another video with mixed authentication.

[@prakashkumark2657]

@@senadmeskincoding Thank You. It would be really helpful if u make another video asap with mixed authentication and roles.

[@niyazi42]

Thank you brother

[@senadmeskincoding]

You are welcome :)

[@81NARY]

Thanks man, helped me so much. Can you please do a video on how to authenticate users and persist JWTs with Identity?

[@senadmeskincoding]

I will, thanks for suggestion.

[@HarshShah92]

HI, thank you for video, it's awesome and help me a lot. but i am facing one problem. i've set expires: DateTime.Now.AddMinutes(1) but it still give access to controller even after expire time(which is one minute). can you help? Thanks

[@HarshShah92]

i got it, in options.tokenvalidationparameter, add this parameter, ClockSkew=TimeSpan.Zero, will work.

[@priyankabarde6503]

Could you please make some more video

[@Vietnamcamping89]

what about the problem when someone copy that string then encoding/decode on browser

[@nssandhu4401]

Please have the font size increased in your next videos. It is straining to read it at this level.

[@senadmeskincoding]

Thanks, I will.

[@richardassal7788]

Can you direct me to a video or a hyperlink that will show me how to reject (black list) a token and still use this methodology? Can the token be inspected at the API call? Let’s assume a token has been ill gotten. I would like the opportunity to stop the token in its tracks without having to bring down the server.

[@senadmeskincoding]

I have no link but I could create a video with all that in. Net core 3.0?

[@tonyriddle7646]

in jwt.io ... it shows invalid signature... explain plz??

[@songssam]

how did you run the server? I use vs code but whenever I run it, the server side does not automatically re-compile. I use angular 6 + core 2.1

[@senadmeskincoding]

I used Visual Studio 2017,for vs code you need to type in your terminal "dotnet build" to re-build application if it's not rebuilding on request.

[@senadmeskincoding]

And also if server is not running you need to start it with command "dotnet run"

[@pratikgajjar6183]

If you want automatic re-compile, you need to add hot module replacement in your configuration, it is already added in core 2.1. (not sure about previous version)

[@ronl1205]

If you want to auto-recompile, run "dotnet watch run" instead.

[@raydeleon7806]

nice tutorial, bro i am using CORS in my project and it doesnt work, only works when i comment the use of cors

[@senadmeskincoding]

Thanks.

[@raydeleon7806]

@@senadmeskincoding i already solved it just change the order of services in startup.cs, you have any tutorial for read the token?

[@senadmeskincoding]

Read claims? Or actual token?

[@rikihanks]

But how is this secure? You give tokens for free and then everyone can use them? I was expecting an username and password authentication before giving the token.

[@senadmeskincoding]

This is not a full project, this is just example how to geberate and how to authenticate. In real app there will be different approach for generating and assigning process. This is how to generate and auth with JWT nothing else.

[@jarekwojtaszczyk7050]

Meybe show. How read the "Our_Custom_Claim"s value ? The value which i can't read is useless.

[@senadmeskincoding]

I understand you, but this video was just about authorization. Maybe I will make one about reading it, and it's just a method :)

[@senadmeskincoding]

Hey, You can see that in the video I made just for this purpose kzbin.info/www/bejne/pJDaYWqMmq6alc0

[@JamsheerIndian]

using httpost here for getting the token ? ..is it right way ? anyone pls reply, (i am new)

[@senadmeskincoding]

This is not about right or wrong way, this is just demonstration how to use tokens, and how to implement them into your app. And certainly everyone should use https in production, but this is demo on local PC.

[@Tajdev]

I don't know what to do.

[@senadmeskincoding]

You have problems with it?

[@Tajdev]

@@senadmeskincoding Is it applicable to asp. Net 4.x. where's the source code.

[@senadmeskincoding]

Yes it is, but you need to configure it differently. I have no code for asp.net but this code can be forked from a link in description.