How to Add Basic Authentication to ASP.NET Core MVC
A legacy .NET Core example of Basic authentication with an MVC filter and custom middleware, including its security limitations.
Security
3 notes in this thread.
How to Add Request Throttling and Rate Limiting in ASP.NET Core
Configure ASP.NET Core rate-limiting middleware with named policies, endpoint attributes, HTTP 429 responses, and production considerations.
How to Set Up EPiServer Authentication with OpenID Connect and IdentityServer3
A legacy EPiServer 10 and OWIN example using OpenID Connect with IdentityServer3, including claims synchronization and client setup.