Skip to content
Hallway
0:00 / 0:00

#asp.netcoreidentity#authentication#claims

Demystifying authentication in ASP.NET Core - Tore Nestenius - NDC Copenhagen 2025

NDC Conferences

230K subscribers • 110 videos on Hallway • Conference channel

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • Presented by Tore Nestenius

Intermediate. Assumes working knowledge.

5.2K views11 months ago2 recommendations

Web developmentSecurityHTTP, REST and GraphQLWeb and application securityC# and .NET

Tore Nestenius explains the inner workings of ASP.NET Core authentication, covering schemas, handlers, claims, and cookies.

This talk was recorded at NDC Copenhagen in Copenhagen, Denmark. #ndccopenhagen #ndcconferences #developer #softwaredeveloper Attend the next NDC conference near you: ndcconferences.com ndccopenhagen.com/ Subscribe to our YouTube channel and learn every day: / @NDC Follow our Social Media! facebook.com/ndcconferences twitter.com/NDC_Conferences instagram.com/ndc_conferences/ #dotnet #security #aspdotnetcore In this talk, we'll explain how authentication works in ASP.NET Core, which can be complicated and have many different parts. We'll cover the main ideas, such as schemas, handlers, ClaimsPrincipal, claims, challenges, session cookies, and more. It will be a practical, in-depth look at how authentication actually works in ASP.NET Core.

Why it's here

2 people recommend this

What people say. Recommended as an excellent, deep-dive explanation of how authentication and identity systems work under the hood in ASP.NET Core.

u/Murphy_Dumpin r/dotnet • Recommends

On “Authentication system”

www.youtube.com/watch?v=hEazKs0QNTw
3View on Reddit

u/wesleycabin r/dotnet • Recommends

On “I'm calling it: Identity is the most beginner-unfriendly system out there.”

I'll try and demystify some of these topics. The docs do indeed only explain how it works in specific scenario's, but not how it all works together. I have personally given conference sessions on this exact topic, and can also recommend this YouTube recording from Tore Nestenius: [video · How does the application process cookies from the browser? I read about schemes in the documentation, but to be honest, I never understood the essence of it; there are tons of these schemes and I didn't see any clear explanations. An authentication scheme (e.g. "cookies") is always used together with an authentication handler type (e.g. CookieAuthenticationHandler, using AddCookie). The scheme can…
2View on Reddit