C# 8 and .NET Core 3 Projects Using Azure - Second Edition

Securing the API

In order to secure the API, we need to do just two things (neither of which requires IdentityServer – and one is already done for us!). The first is that we need to tell ASP.NET Core that we want to use authorization. In our startup file, we're already calling AddControllers. Because ASP.NET Core is now open source, we can simply look at what this does for us:

private static IMvcCoreBuilder AddControllersCore(IServiceCollection services){    return services        .AddMvcCore()        .AddApiExplorer()        .AddAuthorization()        .AddCors()        .AddDataAnnotations()        .AddFormatterMappings();}

A common practice in many Microsoft products (especially .NET Core products) is to use the Builder pattern to allow configuration of the middleware. The premise ...