ASP.NET Core 3 and React

Protecting endpoints with simple authorization

Let's protect the questions endpoint for the POST, PUT, and DELETE HTTP methods by carrying out these steps:

1. Open QuestionsController and add the following using statements:

using Microsoft.AspNetCore.Authorization;

2. To secure the actions, we decorate them with an Authorize attribute:

[Authorize][HttpPost]public async ... PostQuestion(QuestionPostRequest questionPostRequest)...[Authorize][HttpPut("{questionId}")]public async ... PutQuestion(int questionId, QuestionPutRequest questionPutRequest)...[Authorize][HttpDelete("{questionId}")]public async ... DeleteQuestion(int questionId) ...[Authorize][HttpPost("answer")]public async ... PostAnswer(AnswerPostRequest answerPostRequest)...

3. Run the ...