A few suggestions that might improve the already great sample

[adriatic]

A year ago, I spent a good chunk of time roaming in Auth0 domain, looking for good samples. This was not a good experience as it conincided with a lot of turmoil (switching between two big releases, two authentication models, indecision between using Auth0 hosted page and embedded widget - almost nothing worked and I finally gave up.

Now, I see a very different context - this sample is close to what I always hoped for; with this in mind, allow me a few suggestions that would make it perfect.

• All Auth0 samples should pay equal attention to both front and back end part as authentication and authorization actions take place on both ends. I had a really hard time to set the postman to issue the GET with the bearer token obtained in the previous step (I cannot get past the "token expired" problem). So, please consider to upgrade the content of the test folder to a full front end app.

• The settings for Postman provided in this README.md file should really be in the blog itself - as they are really needed there.

Thanks for this sample, Andrea 😄

[scottwaters]

Also the framework has had updates and the test data now is out.

in the books controller the
[HttpGet, Authorize]
needs to be
[HttpGet, Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]

and the user "mary" is now over 18 so both users return the same data :)