ASP.NET Core Identity is an extensible membership system for managing users, authentication, authorization, and related identity data in ASP.NET Core applications.
ASP.NET Core Identity provides authentication and authorization for ASP.NET Core APIs, helping restrict endpoints while avoiding application-managed user accounts. section 9.5
A production-oriented setup focuses on:
Prefer OpenID Connect with an external identity provider so the API verifies presented tokens instead of storing account data. section 9.5
How .NET in Action, Second Edition covers it
How deep it goes
Shows JWT bearer registration, middleware ordering, and controller protection, while deferring broader Identity account management.
Examples
Uses JWT bearer configuration and an Authorize-protected CatalogController.
What it assumes
Assumes an ASP.NET Core API and introduces token-focused authentication without requiring application-managed user accounts.
What you can do after
Operate/configure ASP.NET Core Identity to authenticate JWT requests and protect API controllers.
How it connects
Connects authentication, authorization, JWT, OpenID Connect, and external identity providers.
ASP.NET Core in Action, 3eASP.NET Core Identity is an ASP.NET Core membership system that provides user accounts, authentication, authorization integration, and related identity-management services.
Building Web APIs with ASP.NET CoreASP.NET Core Identity is an ASP.NET Core framework subsystem that provides abstractions and components for managing user accounts, authentication, and related identity data.
Pro ASP.NET Core 7, Tenth EditionASP.NET Core Identity is an extensible membership system for managing users, credentials, claims, roles, and related authentication functionality in ASP.NET Core applications.
service containeruses · A service container is a registry and runtime that stores service definitions, creates or reuses service instances, and manages their lifetimes.
Entity Framework Coreuses · Entity Framework Core is a cross-platform object-relational mapping framework for .NET that enables applications to query and persist data through .NET objects and APIs.
authenticationuses · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
roleuses · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
NuGetuses · NuGet is the package manager and distribution ecosystem for discovering, publishing, retrieving, and consuming reusable .NET software packages.
authorization decisionuses · An authorization decision determines whether a principal is permitted to access a resource or perform an action under applicable permissions or policy.
This explainer was generated by Manning's knowledge graph from the text of .NET in Action, Second Edition. The section links point to the parts of the book it draws on.
