External Publication
Visit Post

Blazor JWT Authentication with Radzen & .NET 10: Complete Starter Template

DEV Community [Unofficial] July 2, 2026
Source

Learn secure authentication in Blazor with this production-ready starter template. JWT tokens, cookies, Radzen UI, and clean architecture explained.

The Problem: Authentication is Complicated

Building a secure Blazor application with authentication can be overwhelming:

  • JWT vs Cookie authentication—which one?
  • How do you handle token refresh?
  • Where do you store secrets?
  • How do you integrate Radzen components with auth?
  • What's the best project structure?

This template answers all these questions in one place.

👉 Want to skip the setup? Clone the repo and have authentication running in 5 minutes. No need to understand everything right now!

If you're looking for a quick-start template that demonstrates Blazor authentication with JWT tokens, Radzen components, and a clean .NET 10 architecture, this guide is for you.

I've created a production-ready starter template that integrates all the best practices for authentication in Blazor applications. Let me walk you through it and show you how to use it to accelerate your projects.

What is Blazor JWT Token Starter?

Blazor JWT Token Starter is a comprehensive template demonstrating secure authentication in Blazor applications with a separation of concerns architecture. It combines:

  • ✅ Blazor Server-side rendering with interactive components
  • ✅ JWT Bearer authentication for secure API communication
  • ✅ Cookie-based authentication for the Blazor app
  • ✅ Radzen UI components for a professional, polished interface
  • ✅ Clean architecture with Domain, Application, Infrastructure, and Shared layers
  • ✅ .NET 10 with modern ASP.NET Core features

Whether you're building an enterprise application or experimenting with secure authentication patterns, this template saves you hours of setup time.

Repository Structure

The template follows a layered architecture pattern:

BlazorJWTTokenStarter/ ├── WebAPI/ # ASP.NET Core Web API (JWT Authentication) ├── WebApp/ # Blazor Server Application (Cookie Auth) ├── Domain/ # Domain entities and interfaces ├── Application/ # Business logic and security services ├── Infrastructure/ # Database and external dependencies └── Shared/ # Shared DTOs and utilities (45% C#, 31% HTML, 19% CSS, 5% JS)

Key Components

  1. WebAPI Project - JWT Token Authority The API project is your authentication server. Key features:

  • JWT Bearer Authentication: Configured in Program.cs with industry-standard token validation

  • Token Settings: Secure key management through appsettings.json

  • Authentication Controller: Issues tokens based on user credentials

  • Scalar API Reference: Built-in interactive API documentation

    // JWT configuration from Program.cs builder.Services.AddAuthentication(options => { options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme; options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme; }) .AddJwtBearer(options => { options.TokenValidationParameters = new TokenValidationParameters { ValidateIssuer = true, ValidateAudience = true, ValidateLifetime = true, ValidateIssuerSigningKey = true, ValidIssuer = jwtSettings.Issuer, ValidAudience = jwtSettings.Audience, IssuerSigningKey = new SymmetricSecurityKey( Encoding.UTF8.GetBytes(jwtSettings.Key)) }; });

  1. WebApp Project - Blazor Client Application The Blazor Server app handles user interactions with secure authentication:

  • Cookie Authentication: Secure, server-side session management

  • Login/Logout Endpoints: Minimal APIs for authentication flow

  • Radzen Components: Beautiful, ready-to-use UI elements

  • Current User Context: Service to access authenticated user information

    // Cookie authentication setup builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme) .AddCookie(options => { options.LoginPath = "/login"; options.LogoutPath = "/logout-user"; options.Cookie.HttpOnly = true; options.Cookie.SecurePolicy = CookieSecurePolicy.Always; options.ExpireTimeSpan = TimeSpan.FromMinutes(30); options.SlidingExpiration = true; });

  1. Domain Layer - Business Rules Contains core domain logic:
  • User entities and constants
  • Interface definitions for repositories
  • Domain-specific business rules
  1. Application Layer - Security & Services Handles authentication logic:
  • JWT token generation and validation
  • User authentication services
  • Security configuration
  1. Shared Layer - Common DTOs Reusable data transfer objects:
  • ApiResponse.cs - Standardized API responses
  • ResultDto.cs - Result types for operations
  • LoginRequest - User login credentials

Getting Started: Quick Setup Guide

Prerequisites

  • .NET 10 SDK or later
  • Visual Studio 2022 or VS Code
  • Basic knowledge of C# and Blazor

Step 1: Clone the Repository

git clone https://github.com/mafzal88/BlazorJWTTokenStarter.git
cd BlazorJWTTokenStarter

Step 2: Update Configuration Edit WebAPI/appsettings.json with your JWT settings:

{
  "JwtSettings": {
    "Key": "your-secret-key-here-min-32-chars",
    "Issuer": "YourAppName",
    "Audience": "YourAppUsers",
    "DurationInMinutes": 60
  },
  "ConnectionStrings": {
    "DefaultConnection": "your-database-connection-string"
  }
}

Step 3: Run the Applications Terminal 1 - Start WebAPI:

cd WebAPI
dotnet run
# Runs on https://localhost:5001
# Visit https://localhost:5001/scalar/v1 for API documentation

Terminal 2 - Start WebApp:

cd WebApp
dotnet run
# Runs on https://localhost:5002

Step 4: Test Authentication

  • Navigate to https://localhost:5002
  • Click "Login"
  • Use your test credentials
  • On success, you'll be authenticated and see the user dashboard

Core Authentication Flow

User → Blazor App (WebApp)
  ↓
Login Form (Radzen Components)
  ↓
POST /login-user (Minimal API)
  ↓
Validate against WebAPI
  ↓
Create Claims & Cookie
  ↓
Redirect to Dashboard

Why This Template is Powerful

🎯 Production-Ready Security best practices implemented Secure cookie handling with HttpOnly and SameSite flags Token validation on every request 30-minute sliding expiration with auto-refresh 🧩 Modular Architecture Clear separation of concerns Easy to extend with business logic Testable service layer Reusable shared components 🎨 UI/UX with Radzen Professional-looking forms and components Responsive design out-of-the-box Theme support with cookie persistence Custom notification system ⚡ Modern .NET Stack .NET 10 latest features Minimal APIs for lightweight endpoints Built-in OpenAPI/Swagger support Async/await throughout

Full code : https://github.com/mafzal88/BlazorJWTTokenStarter

Discussion in the ATmosphere

Loading comments...