How to manage roles, permissions and more, using jwt token and asp.net core identity

After seeing how to protect minimal APIs with JWT tokens and Asp.Net Core Identity, in this article, I want to share a next step, which I found myself facing for personal needs, that is how to make the management of JWT token claims dynamic in order to be able to manage roles, permissions and in my case also modules and licenses of an application. In order to get a working example that exploits this implementation, I created this project that works on SQL server databases and allows this dynamic claims management. The implementation explained above is available as a Nuget package, available at this link, which in the coming weeks will be enriched with further features and documentation as indicated in the TODO present in the README of the aforementioned package. Comments and/or suggestions are always welcome.

Mar 6, 2025 - 07:45

How to manage roles, permissions and more, using jwt token and asp.net core identity

After seeing how to protect minimal APIs with JWT tokens and Asp.Net Core Identity, in this article, I want to share a next step, which I found myself facing for personal needs, that is how to make the management of JWT token claims dynamic in order to be able to manage roles, permissions and in my case also modules and licenses of an application.

In order to get a working example that exploits this implementation, I created this project that works on SQL server databases and allows this dynamic claims management.

The implementation explained above is available as a Nuget package, available at this link, which in the coming weeks will be enriched with further features and documentation as indicated in the TODO present in the README of the aforementioned package.

Comments and/or suggestions are always welcome.