ASP.NET Core 3 and React

Chapter 11 – Securing the Backend

1. In the Configure method in the Startup class, what is wrong with the following?

public void Configure(IApplicationBuilder app, IHostingEnvironment env){  ...     app.UseEndpoints(...);  app.UseAuthentication();}

The problem is that authentication comes after the endpoints are handled in the request pipeline, which means that the user will always be unauthenticated in controller action methods even if the request has a valid access token. This means that protected resources will never be able to be accessed. UseAuthentication should come before UseEndpoints in the Configure method.

2. What attribute can be added to a protected action method to allow unauthenticated users to access it?

AllowAnonymous

3. We are ...