Hello everyone and thanks for your help in advance. I am new to .Core and in the premilitary stages of migrating an intranet along with some external facing api services. My first task is reading up on security and trying to make sure I have a grasp on how things work. First, is it generally best practices to separate any type of MVC web application from any api function? I have always done this in the past, but don't really see anything explicitly stating this other than the MVC app would work on the Identity framework and the api would be secured by Identity Server 4. I have read the documents https://docs.microsoft.com/en-us/aspnet/core/security/authentication/identity?view=aspnetcore-3.1&tabs=visual-studio and https://auth0.com/blog/how-to-build-and-secure-web-apis-with-aspnet-core-3/ as well as the corresponding Microsoft doc, but wanted to make sure I understood basic concepts. Any insight would be appreciated.
↧