Enhancing Web Application Security in ASP.NET Core: A Study on Identity Management and Token-Based Authentication

Abstract

As web threats evolve, securing enterprise applications built on ASP.NET Core is a pressing concern. This study explores modern security implementations using ASP.NET Core Identity, OAuth2, and JWT. Penetration tests and attack simulations are conducted to assess defenses against common vulnerabilities such as CSRF, XSS, and token forgery. The research presents a security-hardening checklist and recommends architectural patterns for scalable, secure identity management in ASP.NET applications.