.Net Core Web API with JWT authentication and multiple providers

Question

I'm creating a .Net Core Web API app that implements JWT based authentication, and planning to offer to users different providers. They should be able to sign up using whatever Facebook, Google or Twitter account they have.

For MVC applications, there are libraries such AspNet.Security.OAuth.Providers, that implements cookie based authentication, but I can't find anything similar for Web APIs. Although I have been searching all sort of online resources, I don't believe I'm the first trying to achieve this goal.

I don't mind doing it from scratch (actually I'm learning a lot), but I have a feeling I'm missing something.

Is there any library/nuget package that offers out-of-box JWT based authentication with multiple providers?

Marcus Höglund · Accepted Answer · 2018-09-05 10:46:15Z

1

The Microsoft.AspNetCore.Authentication lib contains all extensions you need. You can enable them by chaining them on the AddAuthentication() method on the IServiceCollection.

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.JwtBearer;
...
public void ConfigureServices(IServiceCollection services)
{
    services.AddAuthentication()
        .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options => { ...})
        .AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, options => {...})
        .AddMicrosoftAccount(microsoftOptions => { ... })
        .AddGoogle(googleOptions => { ... })
        .AddTwitter(twitterOptions => { ... })
        .AddFacebook(facebookOptions => { ... });

}

Read the section below this code for a nice explaination.

answered Sep 5, 2018 at 10:46

Marcus Höglund

16.9k11 gold badges53 silver badges72 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

luizs81 Over a year ago

Thanks! I didn't realize that I could use Microsoft.AspNetCore.Authentication with the AddJwtBearer. However, it doesn't really help much, I think. I was looking for some component that could wrap the communication with the external providers, so I wouldn't need to keep the URLs for authentication and do the HttpClient requests myself.

Marcus Höglund Over a year ago

@luizs81 ok, i see. I thought you would like to do it from "scratch", then this is the way. Please upvote if answer was to any help :)

luizs81 Over a year ago

Sorry, but it doesn't help much and I'm not sure how Microsoft.AspNetCore.Authentication interacts with JWT in controller level. I can't find any documentation. All the Microsoft examples use MVC and scaffold pages.

Collectives™ on Stack Overflow

.Net Core Web API with JWT authentication and multiple providers

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related