This article discusses application access token management in an ASP.NET Core web application.
The article explains the use of OAuth client credential flow to generate an application access token.
It highlights the properties of an effective token management system like secure token storage, token expiration, and handling invalid or missing access tokens.
The article provides an implementation example using ApplicationAccessTokenCache and ApplicationUsersService class.
The service is registered as a singleton and runs once for the whole application.
The article adds required services in the program file for application access token management.
The token cache is designed for an in-memory cache but can be persisted in a safe way using a persistent cache.
The access token is persisted per application and the solution must work for multiple instances when deployed to multi-instance deployments.
The article also provides links to different strategies to implement token management in ASP.NET Core web applications.
The article concludes by stating the importance of token management in ASP.NET Core web applications.