Start Debugging

Tag: authentication

5 posts

2026-09-15 errors aspnetcore dotnet-10

Fix: ASP.NET Core API endpoints return 401 instead of redirecting to the login page after upgrading to .NET 10

In .NET 10 cookie auth answers API-style endpoints with 401/403 instead of a login redirect. Restore it per endpoint, globally, or with an AppContext switch.

2026-09-10 errors blazor blazor-webassembly

Fix: IsAuthenticated is false and RemoteUserAccount is null in Blazor WebAssembly after an MSAL upgrade

Microsoft.Authentication.WebAssembly.Msal 10.0.8, 9.0.16 and 8.0.27 moved to msal.js 4, whose async init races itself. Initialize MSAL once in Program.cs, or pin 10.0.7.

2026-06-26 comparison aspnetcore dotnet

JWT vs cookie authentication in ASP.NET Core 11: which should you pick?

Use cookie authentication for any app where the browser is the only client, and reserve JWT bearer tokens for APIs called by mobile apps, other services, or third parties. Here is the full decision matrix.

2026-04-28 aspnetcore openapi swagger

How to add OpenAPI authentication flows to Swagger UI in .NET 11

In .NET 11 the OpenAPI document is generated by Microsoft.AspNetCore.OpenApi and Swagger UI is no longer in the template. Here is how to wire Bearer, OAuth2 with PKCE, and OpenID Connect so the Authorize button actually works.

2026-04-28 aspnetcore identity authentication

How to implement refresh tokens in ASP.NET Core Identity

Two working paths in .NET 11: the built-in MapIdentityApi /refresh endpoint, and a custom JWT setup with refresh token rotation, family tracking, and reuse detection.