Secure an Angular SPA and an ASP.NET Core API using Auth0
https://damienbod.com/2021/05/24/secure-an-angular-spa-and-an-asp-net-core-api-using-auth0/
Note
Switch to BFF security
It is now recommended to use backend for frontend security instead of two separate applications with seperate security contexts.
See the following for implementation details:
- 2023-11-26 Updated .NET 8
- 2023-11-03 Updated packages, fixed security headers
- 2023-02-19 Updated to .NET 7 and Angular 15
- 2022-10-21 Updated packages
- 2022-04-18 Updated packages, OIDC angular V14, using nullable
- 2022-02-11 Updated packages and namespaces
- 2022-01-28 Updated packages, .NET 6
- 2021-08-22 Updated packages, improved security headers
- 2021-07-01 Updated to OIDC V12
https://www.npmjs.com/package/angular-auth-oidc-client
https://auth0.com/docs/quickstart/webapp/aspnet-core
https://docs.microsoft.com/en-us/aspnet/core/security/authorization/introduction