Welcome
What will you learn in this course?
Who is the course for and prerequisites
© 2026 Dometrain. All rights reserved.
Learn how to get started with authentication and authorization in .NET
Authentication and authorization are two of the most misunderstood topics in .NET, and getting them wrong is one of the fastest ways to introduce a serious security issue into your application. This course is a deep dive into how authentication and authorization actually work in ASP.NET Core, built up from first principles. You’ll start with the fundamentals, like the User object, ClaimsPrincipal, and the request pipeline, before moving into the authentication middleware and each of its core operations: Challenge, SignIn, Authenticate, SignOut, and Forbid. From there, we’ll go under the hood to explore schemes, authentication tickets, and data protection. There’s a full module dedicated to the cookie handler, including event handlers and everything you need to know about cookie and ticket lifetimes. Finally, you’ll master authorization, from simple and role-based approaches all the way to policy-based and resource-based authorization, custom requirements and handlers, authorization filters, and view-based scenarios.
The presentation, while slow he does the good thing of say what you are going to say, say it and then say what you sed. However, he goes on the demonstrate what he said, why he said it and what could go wrong if you don't do it, or don't do it that way.
MVC Filters and Authorisation Handlers, despite having coded authentication and aromatisation in many .NetCore apps.
I liked how detailed the course was! It covered all the required info in such a great way that it's clear how to build an auth system not only on top of cookies (like it was presented in the course), but on top of any other handlers. The code examples were excellent and it's cool that the course is so practice-driven.
I didn't know much about Cookies and Tickets before the course and how their lifetime works in relation to each other. Also, I liked many of the Advanced authorization concepts covered such as Resource-based authorization (I had a pet project where I had to use something similar but I used some stupid hack instead. I wish I watched the course earlier)
Very detailed explanation, very good topic coverage.
Using different authorization approaches depending on the application's requirements.
This course was exactly what I needed. I know about API security, but understanding what's happening behind the scenes and in the UI is great.
How to protect data at the UI level. Most of my experience is with API's.
Tore had explanations that I found exceedingly easy to follow, even if it meant elaborating on simpler things. I really appreciated this, as I typically benefit from a bit of repetition.
I finally have a complete mental model of what the authentication and authorization middleware are for. I was stumbling through the dark when working with auth in the past without this.
I liked the practical examples, the thorough explanation of different topics and that the whole course was extensive and not surface level.
How important it is to set up authentication and authorization correctly to prevent unwanted access and attacks on apps.
