Question: Authentication about northwindtraders HOT 2 CLOSED

Thank you for the feedback! There are many options for authentication in ASP.NET Core including Windows, OAuth 2.0, and so on. To get started, take a look at the relevant docs; https://docs.microsoft.com/en-us/aspnet/core/security/authentication/?view=aspnetcore-2.1.

Also, once the user has been identified your authorization logic should be included in the application layer. The application layer can check and include permissions in the view models returned to the front end. For example, a CustomerDetailViewModel (displays the details of a specific customer), might include some additional properties indicating if the current user can edit or delete this customer.

Hope this helps & good luck!

from northwindtraders.

Is their a reason not to manage authentication in your core?

That way all implementations that rely on your core benefit from a shared access control integration.

from northwindtraders.