Summary

In this chapter, we understood what authorization is and different ways to implement it using the ASP.NET Core framework. We learned how to restrict or anonymously allow users to access resources using simple, declarative role- and claim-based models and learned how to implement custom logic to authorize user requests using a rich policy-based authorization model.

We learned how to dynamically add authorization policies using authorization policy providers and build custom authorized attributes. We also learned how to configure custom roles in Azure AD and use them in an ASP.NET Core application. Depending on your authorization requirements, you can use one or more authorization models to secure your applications.

In the next chapter, we will learn how to monitor the health and performance of an ASP.NET Core application.