Microsoft.AspNetCore.Authentication.JwtBearer

v2.3.8

ASP.NET Core middleware that enables an application to receive an OpenID Connect bearer token.

aspnet dotnetframework Microsoft

aspnetcore authentication security

NuGet Stats Changelog

Total Downloads

1.3B

1,299,339,420

Published

Jan 6, 2026

Latest stable version

Install

.NET CLI

dotnet add package Microsoft.AspNetCore.Authentication.JwtBearer --version 2.3.8

Package Manager Console

Install-Package Microsoft.AspNetCore.Authentication.JwtBearer -Version 2.3.8

PackageReference

<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="2.3.8" />

Frameworks

.NETStandard2.0

Dependencies

Microsoft.AspNetCore.Authentication

.NETStandard2.0

[2.3.0, )

Microsoft.IdentityModel.Protocols.OpenIdConnect

.NETStandard2.0

[5.7.0, )

Adoption guide

Resource APIs that need standards-based token validation and policy-driven authorization.

Security guide

Why it appears in the guide: JWT bearer authentication middleware for validating access tokens in ASP.NET Core APIs. Trade-off: You still need robust issuer configuration, key rollover handling and defense-in-depth authorization rules.

No SPDX license expression is published. Review the license text and your organisation's policy before redistribution.

Compatibility metadata lists 1 target framework; confirm the exact target used by your application.

How to read this guidance

Sources: published NuGet v3 registry metadata and explicit NuBrowse editorial guides. Refresh: package metadata is refreshed from NuGet when the page loads. Limit: this is not a security, legal or compatibility guarantee; validate the selected version in your project.

Useful next steps

Move from package metadata to a concrete selection or review workflow.

Security package guide Audit NuGet dependencies in a .NET project Review NuGet licenses before shipping