Authentication and authorization in action

Up until now, you have learned about the basics of authentication and authorization. In this section, you will see these two most important ways of securing an application in action.

Basic authentication, token-based authorization, and other authentications

Whenever you’re talking about secured web services/web applications, you should think about the all the points I mentioned regarding authentication and authorization in the previous sections.

In this section, I’m going to discuss authentication and authorization at the implementation stage.

Basic authentication

As is evident from the word basic, basic authentication involves a mechanism where the system asks for simple credentials (username and password) to authenticate or validate the user via incoming requests from the client to the web or application servers via RESTful web services (in our case, ASP.NET Core web APIs).

Consider the following diagram, which showcases basic authentication:

The preceding...