Asp.Net Core 2.0 Webapi简单身份验证

Question

I would like to secure certain api's in dotnet core.
There is no need for roles. I only need to allow or disallow.
To check if a user is allowed I use Active Directory with a Novell nuget library . This part already works.

To secure the api I just add the Authorize attribute on the method.

At the moment I use a http header to pass username and password. (base64 encoded).

How do I combine the AD check with the Authorize attribute?

I've seen AddIdentity / AddAuthentication / AddAuthorization / Claims / JWT / ... but I'm lost.

Answer 1

I would go with Thinktecture IdentityServer Get's the jobe done

you will also find a lot of examples and samples that you can refer to.