Summary
Registration is a very common, yet very important part of an application. We handled the registration of Customers through the API. Before that, we learned to bootstrap the API controller actions and model classes with EF Core. While we were doing all this, we landed on CORS and learned how to handle that, too.
Gradually, we moved to the authentication part, where we discussed Basic Authentication in detail. It is a mechanism to validate the client by the Customer (who are users of our API) credentials (username
and password
), which are passed in with the requests.
Bearer or Token-based Authentication was the next topic we explored, and we implemented the OAuth paradigm using IdentityServer4. In this case, the client can't access a resource directly by username
and password
as it was in the case of basic. What it needs is a token first, which is generated by one Authorization Server upon request by the client with client details such asclient idandclient secret. The token, then, can...