May 2019
Intermediate to advanced
504 pages
11h 50m
English
In a microservice setup with a client-specific backend, multiple authentication strategies can be used to secure web applications. ASP.NET Core provides the required OWIN middleware components to support most of these scenarios.
Depending on the gateway and downstream services architecture, authentication/authorization can be implemented on the gateway and the user identity can be carried over to the backend services:

Another approach would be where each service can utilize the same identity provider in a federated setup. In this setup, a dedicated security token service (STS) would be used by client applications, ...
Read now
Unlock full access