
Completed
Posted
Paid on delivery
I’m building a new ASP.NET Core Web API and I want the authentication and authorization layer to be rock-solid from day one. Here’s what I need built and wired up: • User registration and login endpoints, following a clean service / repository pattern. • Secure password hashing and salting. • JWT access tokens with refresh-token support. • Role-based authorization; the first role to support is “Admin”, though the structure should let me add “User”, “Guest” or any other role later without refactoring core logic. • Email verification that triggers automatically after registration (I’m open to either a link or code flow—whatever integrates fastest with ASP.NET Core Identity). • “Forgot / Reset password” flow that sends the user a reset link via email. • Swagger/OpenAPI documentation generated from the controllers and models. • SQL Server backend accessed through Entity Framework Core code-first migrations. • Clean, well-commented code that passes typical security checks and follows SOLID principles. Acceptance criteria: 1. Register-Login-Refresh cycle fully testable via Swagger. 2. Attempting to hit an [Authorize] endpoint without a valid JWT returns 401. 3. Password hashes stored using a proven algorithm (e.g., PBKDF2). 4. Admin-only endpoint demonstrably blocks non-Admin users. 5. Clear README with setup steps, EF migrations, and sample environment variables. If you’ve built similar token-based auth modules with ASP.NET Core, Entity Framework Core, JWT, and SQL Server, let’s talk.
Project ID: 40518294
35 proposals
Remote project
Active 6 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

Hello, I have extensive experience building secure ASP.NET Core Web APIs with ASP.NET Core Identity, JWT authentication, Entity Framework Core, and SQL Server and from my understanding, you need a complete authentication and authorization module including registration, login, JWT access/refresh tokens, role-based authorization, email verification, forgot/reset password flow, Swagger documentation, EF Core code-first migrations, and a clean service/repository architecture following SOLID principles. I can deliver a production-ready solution where the entire register-login-refresh workflow is testable through Swagger, passwords are securely stored using ASP.NET Core Identity (PBKDF2), admin endpoints are protected, and the codebase remains easily extensible for future roles and features. Could you please confirm your preferred email provider for verification and password reset emails? Best regards Dharam
£15 GBP in 1 day
0.0
0.0
35 freelancers are bidding on average £22 GBP for this job

Hi, Drawing on my more than a decade of IT experience and extensive skill set in C#, .NET, and ASP.NET, I humbly present myself as your go-to partner for your crucial project. I have built my reputation by consistently delivering major and minor projects on time, within budget, and with the highest level of professionalism. My track record speaks for itself: 94% of my clients are not only thoroughly satisfied but also recommend me to others. Having worked with Angular and C#(.NETCORE) MVC extensively, I have a deep understanding of this specific technology stack. With my proficiency in using ASP.NET Core, Entity Framework Core, JWT, and SQL Server, your authentication system is sure to meet and surpass all expectations outlined in the project description. At the core of my development philosophy lies an unwavering commitment to clean code that passes all typical security checks while adhering to SOLID principles. Rest assured that I'll provide you with secure password hashing and salting, robust JWT access tokens with refresh-token support, versatile role-based authorization capabilities (perfectly extensible to accommodate future roles), efficient email verification and password-reset flows, in addition to impeccably generated Swagger/OpenAPI documentation from your controllers and models.
£15 GBP in 7 days
6.7
6.7

Two things in your brief tell me exactly what "rock-solid" means here: a Register-Login-Refresh cycle fully testable through Swagger, and an Admin role that scales to User/Guest later without touching core logic. The structural answer is policy-based authorization plus a roles table, not hardcoded checks, so new roles are config, not refactors. How I'd build it: 1. Service/repository layer over EF Core code-first migrations, SQL Server backend, ASP.NET Core Identity for PBKDF2 hashing and email verification. 2. JWT access tokens plus rotating refresh tokens, with [Authorize] and role policies returning 401/403 correctly. 3. Forgot/reset link flow, Swagger generated from controllers/models, and a README with setup, migrations, and sample env vars. I built the auth and multi-org access layer for a SaaS platform (JWT, refresh rotation, role-based permissions) that held up under real production load. Done = all five of your acceptance criteria pass live in Swagger. For email verification, do you want the link flow or the 6-digit code flow for phase one? P.S. I'd store refresh tokens hashed, not raw, so a leaked database row can't be replayed as a valid session. Waqar
£16 GBP in 7 days
5.0
5.0

Hello, I have strong experience building secure ASP.NET Core Web APIs with ASP.NET Core Identity, JWT authentication, refresh tokens, role-based authorization, Entity Framework Core, and SQL Server. I can implement the complete authentication module including registration, login, email verification, password reset, JWT/refresh token flow, Admin role management, Swagger documentation, and EF Core code-first migrations following SOLID principles and a clean service/repository architecture. I will deliver well-structured, secure, and documented code that meets all your acceptance criteria, including full Swagger testing and setup instructions. I look forward to discussing your project. Best regards, Nagendra Gupta
£15 GBP in 7 days
4.7
4.7

My expertise in .NET, combined with my passion for building secure and reliable digital products, makes me the ideal candidate for your ASP.NET Core Authentication System project. I've not only built similar token-based authentication modules but have also integrated them seamlessly with ASP.NET Core Identity, Entity Framework Core, JWT, and SQL Server. If hired, I assure you that your authentication and authorization layer will be rock-solid from day one. With me, you won't just get a solution; you'll get a reliable long-term technology partner. I take a client-centered approach - understanding your business goals beyond technical requirements and delivering solutions that align with your strategy. Being client-focused doesn't mean compromising on quality or speed. My agile and reliable execution ensures efficient delivery of future-ready systems without sacrificing reliability or scalability. Innovation-first and scalability-driven thinking are key aspects of my work philosophy; this allows me to create digital ecosystems that grows harmoniously with your business. I believe in building practical tech with a purpose and I can deliver the same for you - clean, well-commented code that passes security checks and rigorously follows SOLID principles.
£20 GBP in 1 day
4.2
4.2

Hello! Мы можем сделать вам надёжную систему аутентификации и авторизации под эту задачу. 1. Нужна реализация на ASP.NET Core Identity или без него? 2. Какие роли и сценарии доступа важны в первую очередь? — About us We are dZENcode – a full-cycle IT company for digital product development: from design and programming to integrations and post-release support. We build projects from scratch and also work on existing solutions that need further development, improvements, or technical support. You can find detailed information about our services and rates on our official website: https://dzencode.com. Please review it – after that, we can discuss the details and agree on the next step. ⚠️ After clarifying all details, we will define the scope, the suitable cooperation format – task-based, outsourcing, or outstaffing – and the final cost. Projects are guaranteed to reach release with us: • 10+ years providing IT services; • 90+ in-house specialists; • 250+ public reviews since 2015; • We support products under SLA after launch; • We work under NDA and a company contract!
£15 GBP in 7 days
4.3
4.3

Hello, I'll build a secure ASP.NET Core Web API authentication system with JWT access and refresh tokens, using clean service/repository architecture and ASP.NET Core Identity. The solution will include registration/login, email verification, password reset flow, role-based authorization (Admin-ready with extensible roles), and fully tested endpoints via Swagger with SQL Server and EF Core code-first migrations. I have 3 questions to clarify: 1 Do you want JWT stored only client-side (stateless) or do you also want server-side token tracking (for revocation / logout control)? 2 Which email service should be used for verification and password reset (SMTP, SendGrid, or other provider)? 3 Should refresh tokens be stored in the database for rotation and security tracking, or kept lightweight in cookies/local storage? I’d be happy to discuss this further to ensure it meets your exact needs. Best Regards, Fahad
£10 GBP in 7 days
4.1
4.1

Hello dear, I’m an experienced full-stack developer specializing in ASP.NET Core Web API systems with 10+ years building secure authentication, APIs, and enterprise backend solutions secure scalable REST architecture patterns. I understand you need a secure ASP.NET Core Web API authentication system with JWT access and refresh tokens, role-based authorization, email verification, password reset, Swagger documentation, and SQL Server database using Entity Framework Core with SOLID architecture. ASP.NET Core Identity, JWT, EF Core, SQL Server, secure API design and maintainability best-practices Feel free to share details. I can start immediately and deliver production-ready solution with confidence Best regards, Toriqul Islam
£45 GBP in 2 days
4.2
4.2

Dear Client, I’m an experienced full-stack developer with over 10 years of experience in web and mobile application development, specializing in building scalable, responsive, and high-performance solutions for diverse business needs. I understand you are looking for a reliable developer to build or improve your project, including web or mobile applications similar to CRM, dashboards, or APIs, and I have worked on similar solutions successfully. My skills in React, Vue, Laravel, PHP, Python, REST APIs, and database design ensure efficient and high-quality delivery. Feel free to share more details or ask questions. I’m ready to refine my approach to match your exact requirements. Looking forward to working with you. Best regards, Md Ruhul Ajom
£15 GBP in 2 days
4.2
4.2

A secure auth layer that fails on day one usually fails quietly — a missed token expiry check or an unsalted hash that only surfaces during a security review. Building this right from the start avoids that. I work on ASP.NET Core backends with Identity, EF Core, and SQL Server, focusing on clean service/repository separation that scales without rewrites later. I've built similar JWT + refresh-token systems with role-based authorization designed to extend cleanly (Admin first, more roles added without touching core logic), plus email verification and reset-password flows wired through Identity. Happy to walk through that approach. Plan: Confirm scope — email flow (link vs code), token lifetimes, role list — so nothing gets rebuilt mid-project. Build core: registration, login, JWT/refresh, password hashing, EF Core migrations. Add role-based authorization, email verification, reset-password flow; test each acceptance criterion via Swagger. Final pass — security review against SOLID principles, README with setup and sample env vars, clean handover. Realistic delivery: 3 days. For the email sending — do you already have an SMTP provider/service in mind, or should I set up something flexible you can swap later? Happy to start once scope's confirmed.
£15 GBP in 2 days
0.0
0.0

Hi, I can develop a robust ASP.NET Core authentication system for your web API with user registration, secure password handling, JWT tokens, role-based authorization, email verification, and password reset functionality. The system will generate Swagger documentation, utilize Entity Framework Core for SQL Server backend, and ensure clean, secure, and well-commented code following SOLID principles. I have experience with token-based authentication using ASP.NET Core, Entity Framework Core, JWT, and SQL Server. For this project, I would start by setting up the user registration and login endpoints, implementing secure password hashing, JWT token generation, and role-based authorization. I will also integrate email verification, password reset flows, and Swagger documentation generation. A key challenge is ensuring seamless integration of all components while maintaining security and scalability. I address this by following best practices for authentication, authorization, and data protection within the ASP.NET Core framework. I will provide a complete authentication system with all specified features, including detailed README instructions for setup, EF migrations, and environment variables. Let's discuss the details via chat. Regards,
£20 GBP in 7 days
0.0
0.0

Building a secure ASP.NET Core Web API with JWT authentication, refresh tokens, role-based authorization, and full Identity integration requires a clean foundation from day one—especially around token lifecycle, password security, and separation of concerns. I can implement a structured auth layer using Identity + JWT with refresh-token rotation, email verification, and password reset flows while keeping the architecture extensible for future roles and policies. I’ve worked on ASP.NET Core Web APIs using Entity Framework Core, JWT-based auth systems, and role/claims-based authorization. I focus on clean service layering, SOLID principles, and production-ready security practices so the system is easy to maintain and scale as new roles and features are added.
£15 GBP in 7 days
0.0
0.0

Hi there! Building authentication from scratch in ASP.NET Core needs strong security design, otherwise JWT handling, role control, or password flows can easily become vulnerable. If the structure is not clean from the start, it becomes painful to scale later. I have strong experience in ASP.NET Core Web API, JWT authentication, and Entity Framework Core with SQL Server. I have built secure login systems with refresh tokens, role-based authorization, and ASP.NET Identity integration. I also follow SOLID principles and clean architecture patterns for maintainable backend systems. I will design a clean authentication layer using service and repository pattern for better separation of concerns. I will implement secure JWT access tokens with refresh token support and proper expiry handling. I will set up role-based authorization with extensible structure for future roles like Admin, User, or Guest. I will also integrate email verification, password reset flow, and Swagger documentation for full API testing. check our work [https://www.freelancer.com/u/ayesha86664](https://www.freelancer.com/u/ayesha86664) Do you prefer using ASP.NET Core Identity fully, or a custom authentication system on top of it? Let me know if you’re interested & we can discuss it. Best Regards Ayesha
£10 GBP in 4 days
0.0
0.0

Hello, I have extensive experience building secure authentication and authorization systems with ASP.NET Core, Entity Framework Core, SQL Server, JWT, and ASP.NET Core Identity. I can implement a complete auth module with registration, login, refresh tokens, role-based access control, email verification, password reset workflows, Swagger integration, and code-first migrations while following SOLID principles and security best practices. The solution will be fully documented, testable through Swagger, and designed to support future roles and authentication requirements without major refactoring. Best regards, Ivan
£20 GBP in 1 day
0.0
0.0

Hi, This is exactly the stack I work with daily. I have built JWT authentication, role-based authorization, and SQL Server backends using ASP.NET Core and Entity Framework Core across multiple enterprise systems, so I can deliver this cleanly and quickly. Here is what I will implement: - User registration and login endpoints following clean service and repository pattern - Secure password hashing using ASP.NET Core Identity with PBKDF2 - JWT access tokens with refresh token support and proper expiry handling - Role-based authorization with extensible role structure (Admin first, User and Guest ready to add without refactoring) - Email verification triggered automatically after registration using link flow - Forgot and reset password flow with secure email link - Swagger/OpenAPI documentation generated from controllers and models - SQL Server backend with Entity Framework Core code-first migrations - All five acceptance criteria met and testable via Swagger - Clean README with setup steps, migration commands, and sample environment variables Timeline: 3 days delivery. I can share relevant enterprise .NET work on request. Ready to start immediately.
£20 GBP in 3 days
0.0
0.0

To secure your ASP.NET Core Web API from day one, I will implement a clean architecture separating your service and repository layers, utilizing ASP.NET Core Identity for rapid, secure email verification and password reset flows. I will configure JWT access tokens alongside a secure database-backed refresh token cycle and establish an extendable Role-Based Access Control system mapped via Entity Framework Core code-first migrations. Having built several production-ready SaaS and healthcare authentication modules using C#, PBKDF2 hashing, and SQL Server, I ensure your system will seamlessly pass security checks and remain fully testable via auto-generated Swagger documentation. My focus is on delivering a robust, clean, and SOLID-compliant codebase with transparent communication throughout the process. Would you prefer a numerical code or a secure token link flow for your automated email verification?
£15 GBP in 3 days
0.0
0.0

Hello, I can help you build a secure and scalable authentication system for your ASP.NET Core Web API. I have hands-on experience with ASP.NET Core, Entity Framework Core, SQL Server, JWT authentication, refresh tokens, role-based authorization, and Clean Architecture. In my recent projects, I implemented access/refresh tokens, Identity management, and secure authentication flows following SOLID principles. I can deliver: * User Registration & Login * JWT + Refresh Tokens * ASP.NET Core Identity * Role-Based Authorization (Admin/User/Guest ready) * Email Verification * Forgot/Reset Password Flow * Swagger Documentation * EF Core Code-First Migrations * Clean, maintainable, and well-documented code The final solution will be fully testable through Swagger and will meet the security and acceptance requirements you listed. I’m ready to start immediately and would be happy to discuss any project-specific requirements. Best regards, Mostafa
£20 GBP in 7 days
0.0
0.0

Hi, I can help with your ASP.NET Core authentication system. My experience with .NET, C#, and SQL Server aligns well with your requirements, including API integration and building clean interfaces. I've worked on similar authentication and backend systems in past projects like 'Admin Backoffice'. Let's discuss the specifics.
£15 GBP in 5 days
0.0
0.0

LET'S MAKE SURE YOU ONLY BUILD THIS ONCE. Building a robust ASP.NET Core authentication system is crucial for your new Web API. I understand the importance of implementing a secure and efficient authentication and authorization layer right from the start. To achieve this, I will develop user registration and login endpoints using a clean service/repository pattern. I'll ensure secure password hashing, JWT access tokens with refresh-token support, role-based authorization, email verification, and a forgot/reset password flow. Additionally, I'll integrate Swagger/OpenAPI documentation and ensure a SQL Server backend with EF Core code-first migrations. With a 5-star rating, strong communication, and a focus on long-term relationships, I assure you of a reliable and timely delivery. Have you considered the scalability aspect of your authentication system? Let's discuss how we can future-proof it for potential role expansions. Best, Kurt
£10 GBP in 7 days
0.0
0.0

As a senior software engineer, with over 8 years of extensive experience, I have a deep understanding and proficiency in the core technologies that your project requires, namely ASP.NET Core, Entity Framework Core, JWT, and SQL Server. My solid command over C# programming and familiarity with implementing authentication systems makes me an ideal candidate for this task. Throughout my career, I've delivered numerous high-performance systems that required robust security credentials. Be it building blockchain systems with Solana and Ethereum or developing trading bots integrated into platforms like Jupiter and Orca, my dedication to delivering trustworthy and secure solutions speaks volumes. I understand the importance of clear documentation, clean code, and adhering to SOLID principles for not only efficient code maintenance but also securing your project from potential loopholes. Moreover, my proficiency in working with diverse databases including MySQL, PostgreSQL, MongoDB would ensure that your SQL Server backend requirement is seamlessly implemented using Entity Framework Core code-first migrations. To take things further, I'm adept at generating Swagger/OpenAPI documentation from the controllers and models facilitating future maintenance ease for you. Trust me with your project and you can expect a thoroughly tested solution via swagger following all acceptance criteria; moreover you'll be provided a clear README covering setup steps
£15 GBP in 7 days
0.0
0.0

Hi, I came across your project and it immediately caught my attention because I've recently built a very similar authentication module using ASP.NET Core, Entity Framework Core, JWT access tokens, refresh tokens, role-based authorization, email verification, password reset flows, and SQL Server. I also implemented the solution following DDD principles, MediatR, clean architecture, and a service-oriented approach, with Swagger documentation and support for future role expansion. Since our projects have a lot in common, I’d be interested in connecting and exchanging ideas or experiences around authentication and authorization in .NET. Best regards, Agustin
£15 GBP in 7 days
0.0
0.0

Middlesbrough, United Kingdom
Payment method verified
Member since Jun 16, 2026
$2-8 USD / hour
$8-15 USD / hour
₹37500-75000 INR
$2-8 USD / hour
$2-8 USD / hour
£250-750 GBP
£1500-3000 GBP
$250-750 USD
₹600-1500 INR
₹12500-37500 INR
$10-100 USD
$250-750 USD
₹600-1500 INR
$2-8 USD / hour
$1500-3000 USD
$10-30 USD
$250-750 USD
₹37500-75000 INR
₹1500-3000 INR
₹25000-45000 INR