I need to implement
JWT tokens in my ASP.NET Core API app to handle authorization.
My question is, what is the risk of generating my own
JWT token within my API app as opposed to having it handled for me through a third party solution such as
Azure Active Directory B2C or
There's a nice article written about handling
JWT token creation in ASP.NET Core apps and it seems easy enough and at first glance, I'm not seeing any of the disadvantages of creating my own
JWT tokens within my own app.
Here's the article: http://www.blinkingcaret.com/2017/09/06/secure-web-api-in-asp-net-core/
I'd appreciate someone giving the other side of the story so that I can make a healthy decision. Thanks.