Pro ASP.NET Core Identity: Under the Hood with Authentication and Authorization in ASP.NET Core 5 and 6 Applications 1st ed. Edition

I expect a lot from Adam Freeman's books... and yet this book was able to exceed my expectations. If you are new to Core Identity, you will learn how to implement it in different ways (through MS Identity UI library, and directly). If you have experience - you will understand the fundamentals of it - including the limitations of UI library... limitations so significant - that you shouldn't really use it beyond most trivial application. And if you have (like me) worked with Identity since .NET Core 1 - you will be able to put all the massive changes that Microsoft introduced together, and make sense of them.One thing to note... I don't like Razor Pages. I think it promotes bad coding habits, and brings the worst memories of ASP.NET WebForms. My preferred architecture is SPA (with Angular or React front end); second best - MVC. The examples in the book are in Razor Pages. I took this as an opportunity to follow the code, but develop it in MVC. It takes more time, but in return I got deeper understanding of Identity framework APIs. If anybody is interested, I put it in GitHub (not sure if Amazon allows links in the review).Currently, I finished part 1 ("Using"). It will probably be awhile until I finish the second part (Understanding) due to "day job" commitments. Didn't want to delay - this is the book that made me understand Identity way better than I could ever imagine. I will update the review once I finish the whole book.

Good enough book. I like it. It made me more confident and comfortable with .net identity

Book will get you up and running with ASP.NET Core Identity. Each chapter is clearly written. The book is defined into two parts. The first part gives you a good understanding of each topic that is then expanded upon by the second half.

The subjects covered in the chapters were well written however there seems to be many topics not covered for a "Professional " book.What about using well-known/openid-configuration?What about going a silent refresh?What about creating your own ClientStore by extending IdentiyServer4's IClientStore?