How to integrate authentication/authorization middleware

Short answer: app.UseAuthentication(); // Validates user identity app.UseAuthorization(); // Applies policies/roles Order matters: must be after routing but before endpoints. app.UseRouting(); app.UseAuthentication(); app.UseAuthorization(); app.UseEndpoints(...);

Real-world example (ShopNest)

ShopNest pipeline order matters: exception handling → HTTPS → auth → authorization → endpoints. Auth must run before protected APIs.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.