Ensure that “No Authentication” is selected as we won’t be using authentication either. Click OK. This will create a new ASP.Net Core Web API project in Visual Studio.

Another area of focus is the complexity of authentication and authorization in specific cases for ASP.NET Core applications. This is something that the upcoming .NET 8 version will attempt to address.

While security in ASP.NET Core is wholly claims based, you can still use the Authorize attribute to control access to your application. You just need to set up the right policies to work with the ...