ASP.NET Identity or custom?
Hello, I have a question. I'm quite a beginner programmer and I would like to write a small project for a hotel management system as a web API. I decided to start the project with functions such as registration, login, etc. And here is my question: Is it better to use the Identity package or to write these basic things like registration, login, token authentication using JWT, etc. by myself?
3 Replies
if you want to learn how to do that stuff you could roll it yourself, if you just want something that works and uses acceptable implementations to protect passwords/etc use identity
identity doesn't issue JWTs, its tokens are a proprietary format so you'd have to roll a JWT issuer yourself anyway
Okay, I understand, thanks for the response. Just one more thing, do commercial projects typically use Identity or rather their own implementations?
i don't work on commercial projects but it's common to use a 3rd party authentication service
anything i work on that needs a login just uses our internal active directory server