.Net 6 - Minimal API

Demo 4: Add JWT Authentication/Authorization with minimal API.

• With below example, marked in "Yellow" color, where I have enabled "JWT" token for my endpoints.
• To enable authentication with each individual API, we can use either "[Authorize] attribute" or "RequireAuthorization() method", refer below marked in yellow both the examples.
• To enable AllowAnonymous, you have to use either "[AllowAnonymous] attribute" or "AllowAnonymous() method", refer below marked in yellow both the examples.
• With below example marked in "Turquoise" color, where I have enabled/configured header input for JWT token on swagger.
• Also to use JWT token, you have to install JwtBearer package, refer below screenshot:

using Microsoft.AspNetCore.Authentication.JwtBearer; //JWTToken for auth

using Microsoft.AspNetCore.Authorization;

using Microsoft.OpenApi.Models; //AuthTest

var builder = WebApplication.CreateBuilder(args);

// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle

builder.Services.AddEndpointsApiExplorer();

//builder.Services.AddSwaggerGen();

//Add swagger to have Bearer token option available for header input

builder.Services.AddSwaggerGen(config => {

                                   config.AddSecurityDefinition("Bearer",

                                       new OpenApiSecurityScheme {

                                                                     Description = "JWT header token using 'bearer' scheme",

                                                                     Name = "BearerToken", //Bearer

                                                                     In = ParameterLocation.Header,

                                                                     Type = SecuritySchemeType.ApiKey

                                                                 });

                                   config.AddSecurityRequirement(new OpenApiSecurityRequirement {

                                                                                                    {

                                                                                                        new OpenApiSecurityScheme

                                                                                                        {

                                                                                                          Reference = new OpenApiReference {

                                                                                                              Id = "Bearer", Type = ReferenceType.SecurityScheme

                                                                                                          }

                                                                                                        },

                                                                                                        new List<string>()

                                                                                                    }

                                                                                                });

                               });

//AuthTest

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer();

//This is require to enable authorization for all the endpoints, instead of using [Authorize] attribute to each individual endpoint

builder.Services.AddAuthorization(options => {

                                      options.DefaultPolicy = new AuthorizationPolicyBuilder().

                                                              AddAuthenticationSchemes(JwtBearerDefaults.AuthenticationScheme).

                                                              RequireAuthenticatedUser().Build();

                                  });

var app = builder.Build();

// Configure the HTTP request pipeline.

if (app.Environment.IsDevelopment()) {

    app.UseSwagger();

    app.UseSwaggerUI();

}

app.UseAuthorization();

app.UseAuthentication();

app.MapGet("/AuthTest-AllowAnonymous", [AllowAnonymous] () => "This endpoint is set for AllowAnonymous."); //Url: https://localhost:7176/AuthTest-AllowAnonymous

app.MapGet("/AuthTest-AllowAnonymous-Option2", () => "This endpoint is set for AllowAnonymous.").AllowAnonymous(); //Url: https://localhost:7176/AuthTest-AllowAnonymous

app.MapGet("/AuthTest-Authorize", [Authorize] () => "This endpoint is set for AllowAnonymous."); //Url: https://localhost:7176/AuthTest-Authorize

app.MapGet("/AuthTest-Authorize-Option2", () => "This endpoint is set for AllowAnonymous.").RequireAuthorization(); //Url: https://localhost:7176/AuthTest-Authorize-Option2

app.Run();

Result of above code: