Lejla1502/SeparatingApisPerSecurityLevel

Auth0, ASP.NET Core OAuth, OIDC

Separating API Security Levels

Blogs

• Securing Blazor Web assembly using Cookies and Auth0
• Securing multiple Auth0 APIs in ASP.NET Core using OAuth Bearer tokens
• Securing OAuth Bearer tokens from multiple Identity Providers in an ASP.NET Core API

History

2022-04-17 Update packages, using nullables

2022-02-11 Updated packages, update namespaces

2022-01-10 Updated packages, clean up BFF

2021-11-27 Updated to .NET 6, add security headers

2021-05-09 Updated APIs, added AAD, and AAD Razor page UI to call api, improved swagger definitions

2021-04-17 Added downstream APIs

Links

https://www.nuget.org/packages/Blazor.BFF.OpenIDConnect.Template/

https://damienbod.com/2021/03/08/securing-blazor-web-assembly-using-cookies/

https://auth0.com/

https://docs.microsoft.com/en-us/aspnet/core/blazor/components/prerendering-and-integration?view=aspnetcore-5.0&pivots=webassembly#configuration

https://docs.microsoft.com/en-us/aspnet/core/security/anti-request-forgery

https://docs.microsoft.com/en-us/aspnet/core/blazor/security

https://docs.microsoft.com/en-us/aspnet/core/blazor/security/webassembly/additional-scenarios