How deeply does ASP.NET Core in Action, 3e cover user-jwts?

Explains creation, configuration, request headers, customization, storage, management commands, and Swagger UI integration.

User-jwts

As explained in ASP.NET Core in Action, 3e

dotnet user-jwts create is a .NET CLI command that generates a JWT for local API testing.

user-jwts is a .NET CLI tool for generating JWTs that authenticate requests to a local API. It acts as a small identity provider, creating signing key material and tokens your API can validate without connecting to a production identity provider. section 25.4

Run the command from the project folder to prepare a local token workflow:

Run dotnet user-jwts create. The tool enables User Secrets when necessary, stores signing key material, updates appsettings.Development.json, and prints a JWT. section 25.4.1
Use the generated token in an Authorization header formatted as Bearer <token>. Incorrect header spelling, spacing, prefix, or token content produces a 401 Unauthorized response. section 25.4.1
Add bearer security requirements to OpenAPI so Swagger UI can attach the token to subsequent requests. section 25.5

Customize a token

Use dotnet user-jwts create --name tester --claim role=admin --scope recipes.read to change the subject name and add claims or scopes. Repeat --claim or --scope for additional values. Use --output token when a script needs only the token, or --output json when it needs creation details. section 25.4.2

dotnet user-jwts create

Inspect the core command used to generate a local JWT. section 25.4.1

Generated JWT configurations are stored outside the project alongside User Secrets, but the tokens are not encrypted. Use list, clear, remove, print, and key to manage them; resetting the signing key invalidates earlier tokens. Keep these tokens for local testing and configure a real identity provider for production. section 25.4.3

How ASP.NET Core in Action, 3e covers it

liveBook manning.com

Read ASP.NET Core in Action, 3e on liveBook Get the book at manning.com

Related concepts

User Secretsuses · User Secrets is a development-time configuration feature that stores sensitive application settings outside project files and source-control repositories.
JWT Authenticationconfigures · JWT authentication is an HTTP authentication technique that authenticates requests by validating a JSON Web Token presented as a bearer credential.
JSON Web Tokenproduces · A JSON Web Token is a compact, URL-safe representation of claims encoded as a JSON object and protected by a digital signature, message authentication code, or encryption.
launchSettings.jsonuses · launchSettings.json is a .NET development configuration file defining local launch profiles and settings such as URLs, ports, and environment variables.
identity providerkind of · An identity provider is a system that authenticates users or other entities and supplies identity information or authentication assertions to relying applications and services.

This explainer was generated by Manning's knowledge graph from the text of ASP.NET Core in Action, 3e. The section links point to the parts of the book it draws on.