Separating API Security Levels

Blogs

• Securing Blazor Web assembly using Cookies and Auth0
• Securing multiple Auth0 APIs in ASP.NET Core using OAuth Bearer tokens
• Securing OAuth Bearer tokens from multiple Identity Providers in an ASP.NET Core API

History

• 2024-02-02 Updated packages, fix refresh bug
• 2024-01-14 Updated packages, improve security headers in blazor app
• 2023-11-25 Updated .NET 8
• 2023-11-03 Updated packages, fixed security headers
• 2023-08-20 Updated packages
• 2023-04-28 Updated packages
• 2022-12-17 Updated packages to .NET 7
• 2022-07-09 Updated Auth0 BFF implementation, updated packages
• 2022-04-17 Update packages, using nullables
• 2022-02-11 Updated packages, update namespaces
• 2022-01-10 Updated packages, clean up BFF
• 2021-11-27 Updated to .NET 6, add security headers
• 2021-05-09 Updated APIs, added Microsoft Entra ID, and Microsoft Entra ID Razor page UI to call api, improved swagger definitions
• 2021-04-17 Added downstream APIs

Links

https://www.nuget.org/packages/Blazor.BFF.OpenIDConnect.Template/

https://damienbod.com/2021/03/08/securing-blazor-web-assembly-using-cookies/

https://auth0.com/

https://docs.microsoft.com/en-us/aspnet/core/blazor/components/prerendering-and-integration?view=aspnetcore-5.0&pivots=webassembly#configuration

https://docs.microsoft.com/en-us/aspnet/core/security/anti-request-forgery

https://docs.microsoft.com/en-us/aspnet/core/blazor/security

https://docs.microsoft.com/en-us/aspnet/core/blazor/security/webassembly/additional-scenarios