Blazor Authentication? Hold My Beer!

on YouTube ↗01h 00m

" summary

Explains concrete recipes for cookie + OpenID Connect in Blazor Server, WebAssembly and Auto (hybrid): use authorization code flow with a server-side token store, proactive refresh via Duende.AccessTokenManagement, and a BFF (back end for front end) that issues same-site strict session cookies. Shows code hooks: implement token store interface, register Duende.BFF and map BFF endpoints, or proxy external APIs with YARP and an access token HTTP client. Demos login, claims and API calls working end-to-end.

AI-written summary · about

" chapters (8)

1. 0:00Blazor auth challenges
2. 4:27Blazor auth modes
3. 8:47Blazor Server auth
4. 17:12Blazor WASM auth
5. 21:34BFF pattern with Blazor
6. 36:44Blazor Auto mode auth
7. 42:03Blazor auth data access
8. 55:24Q&A

" related talks

• 57mAuthentication and Authorization in BlazorMarco De Sanctis · NDC London 2021
• 01h 03mSecuring SPAs and Blazor Applications using the BFF (Backend for Frontend) PatternDominick Baier · NDC Security 2023
• 01h 02mUsing the BFF pattern to secure SPA and Blazor ApplicationsDominick Baier · NDC Oslo 2021
• 28mMicrosoft, Google and Cookie Authentication and AuthorizationMichael Washington · .NET Conf: Focus on Blazor 2020
• 57mSecuring SPAs and Blazor Applications using the BFF (Backend for Frontend) PatternDominick Baier · NDC Porto 2022
• 01h 02mSecuring SPAs and Blazor Applications using the BFF (Backend for Frontend) PatternAnders Abel · NDC Oslo 2022
• 59mThe whirlwind tour of Authentication and Authorization with ASP.NET CoreChris Klug · NDC Minnesota 2018
• 01h 04mImplementing Authentication and Authorization with ASP.NET Core 2Chris Klug · NDC Oslo 2018