Flexible Authorisation with ASP.NET Core 7.0

on YouTube ↗36m

" summary

Shows a working Blazor WebAssembly app on ASP.NET Core that first adds an Auditors role the hard way — edit client nav and pages, update server controllers, deploy — then replaces that with permission‑based control using a bit‑flag permissions enum, permissions stored in a permissions claim, and a dynamic policy provider that generates policies like "permissions:7" at runtime. Includes a UI to assign permissions to roles, a PermissionAuthorizationHandler that enforces checks on server and client, and the demo proves the flexible approach works and reduces code churn.

AI-written summary · about

" chapters (10)

1. 0:00Introduction
2. 0:30Overview
3. 2:50Examples
4. 7:23Adding a Role
5. 13:42Flexible Authorisation
6. 22:39Flexible Authorisation Engine
7. 26:04Permissions
8. 28:44Flexible Authorization Policy Provider
9. 33:49Summary
10. 35:27Outro

" related talks

• 51mDeveloping Flexible Authorisation Capabilities in ASP NET CoreJason Taylor · NDC Melbourne 2022
• 47mDeveloping Flexible Authorisation Capabilities in ASP.NET CoreJason Taylor · NDC London 2023
• 57mAuthentication and Authorization in BlazorMarco De Sanctis · NDC London 2021
• 56mImplementing authorization in web applications and APIsDominick Baier, Brock Allen · NDC Oslo 2017
• 01h 07mGetting Authorization Right in .NET: Patterns, Pitfalls...Michele Leroux Bustamante · NDC Security 2026
• 58mImplementing Authorization in Web Applications and APIsDominick Baier, Brock Allen · NDC London 2018
• 54mAuthorization for modern ApplicationsDominick Baier · NDC Oslo 2018
• 51mAuthentication and Authorization in ASP.NET Core 2Roland Guijt · Update Conference Prague 2018