Loading
Topic
Login flows, password handling, identity providers, token validation, refresh tokens, session revocation, and authentication diagnostics.
Practice items tagged with API Authentication.
Explains how ASP.NET Core schemes select handlers and why authenticate, challenge, and forbid produce different security behavior.
Explains API keys, client credentials, managed identity, mTLS, scopes, rotation, and per-client observability.
Explains short-lived access tokens, refresh-token rotation, revocation, storage choices, and replay detection.
Explains reset-token generation, hashing, expiration, generic responses, session revocation, and abuse controls.
Explains password verification, hashing, throttling, generic errors, lockout, and safe login telemetry.
Explains logout semantics for token-based APIs, revoking refresh tokens, device/session records, and short-lived access-token limits.