Authentication and Authorization in Clean Architecture
Authentication is infrastructure and authorization is a business rule. Mixing the two up pulls ASP.NET Core into your domain. Here is where JWT validation, the ICurrentUserService abstraction, permission checks, and ownership rules each live, and how to keep them enforced beyond HTTP endpoints.