Get the source code for this video: https://www.patreon.com/milanjovanovic
Accelerate your Clean Architecture skills: https://bit.ly/3PupkOJ
Master the Modular Monolith Architecture: https://bit.ly/3SXlzSt

Claims-based authorization mechanisms are central to modern authorization in ASP.NET Core. However, the access tokens your Identity Provider (IDP) issued might not always perfectly align with your application's internal authorization needs. External IDPs like Microsoft Entra ID (previously Azure AD) or Auth0 might have their own schema for claims or might not directly issue all the claims your application needs for its authorization logic. The solution? Claims transformation.

Claims transformation allows you to modify the claims before the application uses them for authorization. In this video, I'll show you how to implement a custom claims transformation for flexible authorization policies.

Master Claims Transformation for Flexible ASP.NET Core Authorization
https://www.milanjovanovic.tech/blog/master-claims-transformation-for-flexible-aspnetcore-authorization

Join my weekly .NET newsletter:
https://www.milanjovanovic.tech

Read my Blog here:
https://www.milanjovanovic.tech/blog

Chapters
0:00 What is Claims Transformation?
2:12 Configuring JWT Auth in ASP.NET Core
3:42 Getting a valid JWT with dotnet user-jwts
5:57 Implementing Claims Transformation
9:38 Adding a custom Authorization policy
11:01 Testing the custom Claims Transformation
12:14 RBAC in a Modular Monolith with Claims Transformation

Miguel Nischor

Community Picks is a section on daily.dev where our community members share the most interesting and valuable content they've discovered online. From insightful articles to handy tools, every post is a gem curated by our dedicated coomunity. To contribute to Community Picks, you need to have at least 250 reputation points, ensuring that only active and trusted members can share their finds.

Community Picks

Learn about claims transformation in ASP.NET Core, how it extends user claims, and its role in the authentication process.

Master Claims Transformation for Flexible JWT Auth in ASP.NET Core