Mon, Sep 28 · 5:30 PM CEST
Contract-first Minimal APIs and Authentication/Authorization in ASP.NET Core.
AGENDA
Contract-first REST APIs with ASP.NET Core Minimal APIs
Most ASP.NET Core APIs treat OpenAPI as documentation generated from the implementation. That works well at first, but it can make the contract feel secondary: clients discover breaking changes late, API reviews happen after the code is written, and documentation can drift from what consumers expect.
In this session, we’ll look at a contract-first approach for building REST APIs with ASP.NET Core Minimal APIs, where the OpenAPI document becomes the source of truth rather than a by-product. We’ll explore what this changes in the development workflow, how strongly typed contracts can help keep implementation and specification aligned, and what trade-offs come with moving the API contract to the center of the design process.
We’ll also compare this approach with the more common code-first style in .NET.
Based on the experience of hundreds of customer projects Anders shares his recommendations for authentication and authorization with Asp.Net Core.
ASP.NET Core Authentication and Authorization - the Key Concepts
Authentication Schemes: Configuration and working with multiple schemes.
Asp.Net Identity: When to use it and how it affects the schemes used.
Data Protection: How it is used behind the scenes and the configuration required before going to production.
Authorization Policies: How to use them with a minimum of ceremony.
Renato Golia
Anders Abel
