You're reading from Enterprise Application Development with C# 9 and .NET 5 Enhance your C# and .NET skills by mastering the process of developing professional-grade web applications

Product type Paperback

Published in Mar 2021

Publisher Packt

ISBN-13 9781800209442

Length 610 pages

Edition 1st Edition

Languages

Tools

.NET

Concepts

Application Development

Authors (5):

Ravindra Akella

Suneel Kumar Kunani

Bhupesh Guptha Muthiyalu

Arun Kumar Tamirisa

Rishabh Verma

+1 more

View More author details

Table of Contents (24) Chapters

Preface

1. Section 1: Architecting an Enterprise Application and its Fundamentals

2. Chapter 1: Designing and Architecting the Enterprise Application FREE CHAPTER

3. Chapter 2: Introducing .NET 5 Core and Standard

4. Chapter 3: Introducing C# 9

5. Section 2: Cross-Cutting Concerns

6. Chapter 4: Threading and Asynchronous Operations

7. Chapter 5: Dependency Injection in .NET

8. Chapter 6: Configuration in .NET Core

9. Chapter 7: Logging in .NET 5

10. Chapter 8: Understanding Caching

11. Section 3: Developing Your Enterprise Application

12. Chapter 9: Working with Data in .NET 5

13. Chapter 10: Creating an ASP.NET Core 5 Web API

14. Chapter 11: Creating an ASP.NET Core 5 Web Application

15. Section 4: Security

16. Chapter 12: Understanding Authentication

17. Chapter 13: Understanding Authorization

18. Section 5: Health Checks, Unit Testing, Deployment, and Diagnostics

19. Chapter 14: Health and Diagnostics

20. Chapter 15: Testing

21. Chapter 16: Deploying the Applications in Azure

22. Assessments

23. Other Books You May Enjoy

Chapter 12: Understanding Authentication

So far, we have built the user interface (UI) and service layer of our e-commerce application. In this chapter, we will see how to secure it. Our e-commerce application should be able to uniquely identify a user and respond to the user's requests. A commonly used pattern for establishing user identity involves the provision of a username and password. These are then verified against the user's profile data, which is stored in a database or in an application. If it is matched, a cookie or token with the user's identity is generated and stored in the client's browser so that for subsequent requests, a cookie/token is sent to the server and validated to service requests.

Authentication is a process in which you identify a user or a program accessing protected areas of your application. For instance, in our e-commerce application, a user can navigate through different pages and browse products that are displayed. However,...