Authorization in ASP.NET Core got more sophisticated with the recent introduction of policy-based authorization. Authorization in ASP.NET Core now uses requirements and handlers, which are decoupled from your controllers and loosely coupled to your data models.
Read full news article on Dzone