ASP.NET Core Identity - Authentication & Authorization [MVC]

Extend the default ASP.NET identity user with an application user class, add properties like name, configure a dbset in the context, and run migrations to add new columns.

Register users and observe the discriminator column indicating identity user versus application user. Change program.cs to use application user, and inject user manager and sign in manager for registration.

Create the login view in ASP.NET Core Identity MVC, wire it to the account controller, and scaffold a Razor login view with remember me and register links.

Learn how to implement password reset emails in an ASP.NET Core Identity MVC app using SendGrid, including setting up a domain-verified sender and integrating the SendGrid NuGet package.

Implement a secure forgot password flow by sending a confirmation email, injecting an email sender, generating a reset token, and validating the code via a reset password endpoint.

Validate the token and confirm the user's email using the user manager, retrieving the user by id and directing to success or error views in ASP.NET Core Identity MVC.

Implement an enable authenticator get endpoint that generates a new authenticator key, builds a two factor authentication view model with a token, and returns it to the authorized user.

Set up a two factor authentication flow by adding a verify authenticator code GET endpoint and a verify authenticator view model with code, return URL, and remember me.

Build a verify authenticator view and its view model to enter the Microsoft Authenticator code, handle the return URL, and post to an endpoint that signs in.

Implement a post endpoint to verify authenticator codes, apply anti-forgery validation, and use two-factor authenticator sign-in to secure login flows with a return URL and remember options.

Implement two-factor authentication by integrating a qr code generator and authenticator uri in an mvc app, using a JavaScript qr code file and encoding issuer and email into the url.

Explore using claims with ASP.NET Core Identity to control access, creating a claim store with create, edit, and delete claims and integrating them with roles for authorization.

Implements a post endpoint to manage user claims by retrieving existing claims, removing old ones, and adding new claims from a multi-select claims view model, with validation and error handling.

Assign and display multiple roles for users by updating account and user controllers to fetch roles with get role async, join them with commas, and show them correctly.

Explore policy-based authorization with ASP.NET Core Identity by creating admin claims, displaying claim types, and retrieving claims, noting that claim type is not case sensitive while claim value is.

Learn to implement policy-based authorization by requiring an admin role and a create claim, configure the policy in code, and enforce it on an endpoint.

Implement a custom authorization handler to restrict role deletion to superadmins by creating a Superadmin checker, implementing IAuthorizationRequirement, and wiring it into a policy in program.cs.

Add a first name claim for the user, refresh on login, and implement a custom policy and handler in program.cs to grant access when the name contains a string, case-insensitive.

Design the external login confirmation view with the external login confirmation view model, showing the provider name and a register action, and populate name and email from external claims.