Authorisation in ASP.Net Core
Authorisation is about determining what a user can do
A treatise on the design of behaviourally complete APIs
Collected notes from various sources