generated from NetCoreTemplates/razor-ssg
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
5 changed files
with
23 additions
and
4 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
19 changes: 19 additions & 0 deletions
19
MyApp/_whatsnew/2024-11-26_v8.5/apikey-credentials-auth.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
--- | ||
title: API Keys Credentials Provider for .NET 8 Microservices | ||
url: /posts/apikey-credentials-auth | ||
image: /img/posts/apikey-credentials-auth/ai-server-auth-apiexplorer.png | ||
order: 4 | ||
--- | ||
|
||
The usability of the **Simple Auth with API Keys** story has been significantly improved with the new | ||
`ApiKeyCredentialsProvider` which enables .NET Microservices to provide persistent UserSession-like | ||
behavior using simple API Keys which can be configured together with `AuthSecretAuthProvider` and | ||
`ApiKeysFeature` to enable a Credentials Auth implementation users can use with their API Keys | ||
to restrict access to Authorized Users or Admin AuthSecret to protect Admin UIs and APIs. | ||
|
||
### Session Auth with API Keys | ||
|
||
Behind the scenes this creates a Server Auth Session but instead of maintaining an Authenticated | ||
User Session it saves the API Key in the session then attaches the API Key to each request. | ||
This makes it possible to make API Key validated requests with just a session cookie instead of | ||
requiring resubmission of API Keys for each request. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters