Contract-first APIs and Authentication/Authorization in ASP.NET Core.

Contract-first Minimal APIs and Authentication/Authorization in ASP.NET Core. Join us for two talks on ASP.NET Core. Renato Golia shares his experiences with Contract-first REST APIs with ASP.NET Core Minimal APIs and Anders Abel gives an overview of Authentication and Authorization in ASP.NET Core. AGENDA 17.30 Doors open 17.45 Session 1 - Renato Golia 18.30 Food and drinks 19.00 Session 2 - Anders Abel 20.00 Questions, Discussions and Mingle 20.30 Event ends Contract-first REST APIs with ASP.NET Core Minimal APIs Most ASP.NET Core APIs treat OpenAPI as documentation generated from the implementation. That works well at first, but it can make the contract feel secondary: clients discover breaking changes late, API reviews happen after the code is written, and documentation can drift from what consumers expect. In this session, we’ll look at a contract-first approach for building REST APIs with ASP.NET Core Minimal APIs, where the OpenAPI document becomes the source of truth rather than a by-product. We’ll explore what this changes in the development workflow, how strongly typed contracts can help keep implementation and specification aligned, and what trade-offs come with moving the API contract to the center of the design process. We’ll also compare this approach with the more common code-first style in.NET. Based on the experience of hundreds of customer projects Anders shares his recommendations for authentication and authorization with Asp.Net Core. ASP.NET Core Authentication and Authorization - the Key Concepts This is an introductory session that will show the basic concepts of Authentication and Authorization in Asp.Net Core and how they interact. Topics that are covered include: • Authentication Schemes: Configuration and working with multiple schemes. • Asp.Net Identity: When to use it and how it affects the schemes used. • Data Protection: How it is used behind the scenes and the configuration required before going to production. • Authorization Policies: How to use them with a minimum of ceremony. *Renato Golia* Renato Golia is a software architect and developer with a focus on.NET, cloud-based distributed systems, and infrastructure. He works day-to-day with ASP.NET Core, AWS, Azure, and Terraform, mostly on systems where API design, integrations, and operational concerns are tightly connected to the architecture. He has also created and maintained several open-source projects for.NET developers, with over 12 million downloads on NuGet. His work spans API design, contract-driven development, and cloud architecture, with a recurring interest in keeping system boundaries explicit enough to evolve over time. *Anders Abel* Anders Abel is a senior.NET developer in Stockholm. He has been programming since he was 9 and still thinks it’s tremendously fun. When asked what he does for a living he often responds "building login buttons". Anders has extensive experience on Single Sign On and API security. His Saml2 library is trusted by millions of users world wide and he has deep expertise on OAuth and OpenID Connect from his work on Duende IdentityServer.