ASP.NET Core 3 Authorization - Advanced Concepts and Extras

Explore advanced authorization concepts in ASP.NET Core 3 through this comprehensive video tutorial. Dive into topics such as using IAuthorizationService for invoking authorization anywhere in your application, implementing global authorization filters, and leveraging the AllowAnonymous attribute to revoke authorization checks. Learn about securing functions with OperationAuthorizationRequirement and objects with ResourceBasedHandler. Discover how to append to the current ClaimsPrincipal using IClaimsTransformation, create custom AuthorizationPolicy resolvers with AuthorizationPolicyProvider, and extend the [Authorize] attribute. Gain valuable insights into these lesser-known but potentially useful authorization techniques to enhance your ASP.NET Core applications.

Syllabus

- IAuthorizationService - Used to invoke authorization at any point in your application.
- Global Authorization Filter - Apply authorization policies globally to your application
- AllowAnonymous Attribute - Revoke authorization checks
- OperationAuthorizationRequirement - authorize operations securing functions
- ResourceBasedHandler - authorize resources securing object
- IClaimsTransformation - append to the current ClaimsPrincipal
- AuthorizationPolicyProvider - your custom AuthorizationPolicy resolver.
- Custom Authorize Attribute - extending the [Authorize] attribute.