Summary

In this chapter, you learned how to authenticate users with Azure AD B2C using Microsoft Identities and ASP.NET Core Identity. With Azure AD B2C, you added custom user attributes, specified user flows, and registered applications.

Instead of implementing protection with every API, you created a reverse proxy using Microsoft YARP and protected the APIs with a gateway service. Using YARP, we defined routes to map different backend services and configured policies with routes to require authenticated clients.

You also learned to use ASP.NET Core Identity as an alternative option for authentication and authorization with built-in ASP.NET Core functionality but a simpler feature set.

The next chapter covers how to test microservices solutions, from unit tests to integration tests, including testing services with Microsoft Playwright.