Secure OrderFlow with JWT + Refresh Tokens

Add ASP.NET Core Identity to OrderFlow. Implement register and login endpoints that return a JWT access token (60 min expiry) and a hashed refresh token (30 day expiry). Protect all write endpoints — only Admins can create/delete products, authenticated Customers can create orders. Implement token refresh and logout.

Your progress0%

Requirements

Skills you'll use

.NETJWTASP.NET Core IdentitySecurityRefresh Tokens

Read this first

This task is based on the lesson below. Complete the reading before attempting it.

Go to lesson

What to expect

Difficulty: intermediate
Time: 60 min
Steps: 6
Type: Build