Summary

This chapter took us on a journey from basic auth to federated identities. It started with explaining what authentication and authorization are all about. There were details, such as understanding what Base64 encoding and hashing are good for. The sample implementations of AuthN and AuthZ intended to give you a better understanding of what's going on, even though you will probably not implement or use all of these techniques. The walkthrough of OAuth and introducing AAD should put you in a good position to implement production-grade identity in your web apps.

Not every app needs to be super secure, but this should have set you up for web apps that can be more personal than treating all visitors as anonymous users.

With identity covered, the next chapter will dive into another hot topic these days, as we cover the ins and outs of working with containers.