42 lines
7.8 KiB
HTML
42 lines
7.8 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en" itemscope itemtype="https://schema.org/Article">
|
|
<head>
|
|
<script async src="https://www.googletagmanager.com/gtag/js?id=G-G9G5HP50VK"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}gtag('js',new Date());gtag('config','G-G9G5HP50VK');</script>
|
|
<meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<title>Securing Your Blazor Server Application with JWT and ASP.NET Core Identity | Indotalent Blog</title>
|
|
<meta name="description" content="Four-layer security for Blazor Server: ASP.NET Core Identity, JWT authentication for REST APIs, policy-based authorization, and SignalR protection. Complete guide." />
|
|
<meta name="robots" content="index, follow" />
|
|
<link rel="canonical" href="https://www.indotalent.com/blog/blazor-server-security-jwt.html" />
|
|
<link rel="icon" type="image/x-icon" href="../favicon.ico" />
|
|
<script type="application/ld+json">{ "@context":"https://schema.org","@type":"Article","headline":"Securing Your Blazor Server Application with JWT and ASP.NET Core Identity","author":{"@type":"Person","name":"go2ismail"},"datePublished":"2026-03-01","publisher":{"@type":"Organization","name":"Indotalent"}}</script>
|
|
<script type="application/ld+json">{ "@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{ "@type":"ListItem","position":1,"name":"Home","item":"https://www.indotalent.com/" },{ "@type":"ListItem","position":2,"name":"Blog","item":"https://www.indotalent.com/blog/" },{ "@type":"ListItem","position":3,"name":"Blazor Server Security","item":"https://www.indotalent.com/blog/blazor-server-security-jwt.html" }]}</script>
|
|
<script src="https://cdn.tailwindcss.com"></script><script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>
|
|
<script>tailwind.config={theme:{extend:{colors:{brand:{50:'#fff7ed',100:'#ffedd5',200:'#fed7aa',300:'#fdba74',400:'#fb923c',500:'#f97316',600:'#ea580c',700:'#c2410c'}},fontFamily:{sans:['Inter','system-ui','sans-serif']}}}}</script>
|
|
<style>.nav-blur{backdrop-filter:blur(12px);-webkit-backdrop-filter:blur(12px)}.gradient-text{background:linear-gradient(135deg,#f97316,#ea580c);-webkit-background-clip:text;-webkit-text-fill-color:transparent;background-clip:text}.btn-primary{display:inline-flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#f97316,#ea580c);color:#fff;font-weight:600;border-radius:12px;padding:12px 24px;transition:all 0.2s;box-shadow:0 4px 14px -4px rgba(249,115,22,0.35);text-decoration:none}article h2{font-size:1.5rem;font-weight:700;margin:1.75rem 0 0.75rem;color:#111827}article h3{font-size:1.15rem;font-weight:600;margin:1.5rem 0 0.5rem}article p{font-size:0.95rem;line-height:1.8;color:#4b5563;margin-bottom:1rem}article code{background:#f3f4f6;padding:2px 6px;border-radius:4px;font-size:0.85rem;color:#ea580c}article ul{list-style:disc;padding-left:1.5rem;margin-bottom:1rem}article ul li{font-size:0.95rem;line-height:1.8;color:#4b5563}</style>
|
|
</head>
|
|
<body class="bg-white text-gray-900 antialiased">
|
|
<nav aria-label="Breadcrumb" class="pt-20 bg-white border-b border-gray-100"><div class="max-w-4xl mx-auto px-4 sm:px-6 lg:px-8 py-2.5"><ol class="flex items-center gap-1.5 text-xs text-gray-400"><li><a href="../index.html" class="hover:text-brand-500">Home</a></li><li><span class="text-gray-300">/</span></li><li><a href="index.html" class="hover:text-brand-500">Blog</a></li><li><span class="text-gray-300">/</span></li><li><span class="text-gray-600 font-medium">Blazor Security</span></li></ol></div></nav>
|
|
<nav class="fixed top-0 left-0 right-0 z-50 nav-blur bg-white/85 border-b border-gray-200/60"><div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8"><div class="flex items-center justify-between h-16"><a href="../index.html" class="flex items-center gap-2.5"><img src="../img/logo-indotalent-dark.svg" alt="Indotalent" class="h-8 w-auto" /></a><div class="hidden lg:flex items-center gap-6"><a href="../index.html#products" class="text-sm font-medium text-gray-600 hover:text-brand-500">Products</a><a href="../for-beginners.html" class="text-sm font-medium text-gray-600 hover:text-brand-500">Beginners</a><a href="../for-freelancers.html" class="text-sm font-medium text-gray-600 hover:text-brand-500">Freelancers</a><a href="index.html" class="text-sm font-medium text-brand-600">Blog</a></div></div></div></nav>
|
|
<section class="pt-24 pb-10 lg:pt-32 lg:pb-12"><div class="max-w-3xl mx-auto px-4 sm:px-6 lg:px-8">
|
|
<div class="flex items-center gap-2 mb-3"><span class="text-xs font-semibold bg-blue-50 text-blue-700 border border-blue-200 rounded-full px-2.5 py-0.5">Blazor Server</span><span class="text-xs text-gray-400">March 2026 · 8 min read</span></div>
|
|
<h1 class="text-3xl sm:text-4xl font-extrabold text-gray-900 mb-4">Securing Your Blazor Server Application with JWT and ASP.NET Core Identity</h1>
|
|
<div class="bg-green-50 border border-green-200 rounded-xl p-4 mb-8"><p class="text-sm text-green-800 font-semibold mb-1">TL;DR</p><p class="text-sm text-green-700">Four-layer security: ASP.NET Core Identity for user management, JWT for API endpoints, policy-based authorization for fine-grained control, and SignalR protection for real-time channels.</p></div>
|
|
<article>
|
|
<p>Security is a layered concern in Blazor Server applications. The framework provides multiple protection mechanisms that must be configured correctly.</p>
|
|
<h2>Layer 1: ASP.NET Core Identity</h2>
|
|
<p>Identity provides user management, password hashing, role management, and cookie-based authentication. For Blazor Server, the default cookie authentication is sufficient for internal page access.</p>
|
|
<h2>Layer 2: JWT for API Endpoints</h2>
|
|
<p>When your Blazor app also exposes a REST API, cookies aren't appropriate. JWT bearer tokens provide stateless authentication. Indotalent products configure both authentication schemes simultaneously: cookies for Razor components, JWT for Minimal API endpoints.</p>
|
|
<h2>Layer 3: Policy-Based Authorization</h2>
|
|
<p>Role-based authorization works for simple cases, but policy-based authorization provides finer control. Define policies like "CanApproveOrders" or "CanViewFinancialReports" and apply them declaratively.</p>
|
|
<h2>Layer 4: Secure SignalR</h2>
|
|
<p>SignalR hubs handle real-time UI updates. Ensure hubs are protected with the <code>[Authorize]</code> attribute. Never transmit sensitive data through hub methods without encryption.</p>
|
|
<h2>Key Takeaways</h2>
|
|
<ul><li>Identity + JWT dual authentication for Razor components and API endpoints</li><li>Policy-based authorization for fine-grained access control</li><li>SignalR hubs must be protected with [Authorize]</li><li>All Indotalent products come with pre-configured security layers</li></ul>
|
|
</article>
|
|
<div class="mt-10 p-6 bg-gradient-to-r from-orange-50 to-amber-50 border border-orange-200 rounded-2xl"><p class="text-sm text-gray-700 font-semibold mb-2">Explore secure Blazor products</p><p class="text-sm text-gray-600 mb-4">All Indotalent products ship with JWT + Identity pre-configured. $21 each.</p><a href="../index.html#products" class="btn-primary text-sm">Explore Products</a></div>
|
|
<div class="mt-6"><a href="index.html" class="text-sm text-brand-600 hover:text-brand-700">← Back to Blog</a></div>
|
|
</div></section>
|
|
<footer class="bg-white border-t border-gray-200"><div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-10"><div class="flex flex-col md:flex-row items-center justify-between gap-4"><a href="../index.html" class="flex items-center gap-2"><img src="../img/logo-indotalent-dark.svg" alt="Indotalent" class="h-5 w-auto" /></a><p class="text-xs text-gray-500">© 2024-2026 Indotalent. <span class="text-brand-500">♥</span> by go2ismail</p></div></div></footer>
|
|
</body>
|
|
</html> |