Securing ASP.NET Core 6 with OAuth2 and OpenID Connect

Focused View

Kevin Dockx

9:46:53

349 View

1. Course Overview

1. Course Overview.mp4

01:46

02. Getting Started with ASP.NET Core Security

01. Coming Up.mp4

03:24

02. Positioning This Course.mp4

01:56

03. Course Prerequisites.mp4

00:49

04. Frameworks and Tooling.mp4

01:54

05. Application Architectures and Security.mp4

09:42

06. Working Towards a Central Identity Provider.mp4

05:53

07. Introducing OAuth2.mp4

02:58

08. Introducing OpenID Connect.mp4

02:04

09. Demo - Introducing the Demo Application.mp4

05:40

10. Summary.mp4

00:57

3. Understanding Authentication with OpenID Connect

1. Coming Up.mp4

00:41

2. Learning How OpenID Connect Works.mp4

03:12

3. Confidential and Public Clients.mp4

02:35

4. OpenID Connect Flows and Endpoints.mp4

11:46

5. Introducing Duende IdentityServer.mp4

03:21

6. Demo - Setting Up IdentityServer.mp4

11:15

7. Demo - Adding a User Interface.mp4

03:19

8. Demo - Adding Users to Test With.mp4

04:34

9. Summary.mp4

02:44

04. Securing Your User Authentication Processes

01. Coming Up.mp4

00:46

02. The Authorization Code Flow.mp4

09:05

03. Demo - Configuring IdentityServer to Log in with The Authorization Code Flow.mp4

02:40

04. Demo - Logging in with the Authorization Code Flow.mp4

17:51

05. Authorization Code Injection Attack.mp4

01:43

06. The Authorization Code Flow with PKCE Protection.mp4

01:53

07. Demo - Logging out of Our Web Application.mp4

04:31

08. Logging out of the Identity Provider.mp4

02:23

09. Demo - Redirecting After Logging out.mp4

03:49

10. The UserInfo Endpoint.mp4

04:12

11. Demo - Returning Additional Claims From the UserInfo Endpoint.mp4

01:50

12. Inspecting an Identity Token.mp4

03:27

13. Summary.mp4

01:46

5. Working with Claims in Your Web Application

1. Coming Up.mp4

00:48

2. Demo - Claims Transformation - Keeping the Original Claim Types.mp4

02:20

3. Demo - Claims Transformation - Manipulating the Claims Collection.mp4

04:10

4. Role-based Access Control.mp4

01:37

5. Demo - Role-based Authorization - Ensuring the Role Is Included.mp4

05:38

6. Demo - Role-based Authorization - Using the Role in Your Views.mp4

02:45

7. Demo - Role-based Authorization - Using the Role in Your Controllers.mp4

02:15

8. Demo - Creating an Access Denied Page.mp4

03:00

9. Summary.mp4

00:49

6. Understanding Authorization with OAuth2 and OpenID Connect

1. Coming Up.mp4

00:34

2. Learning How OAuth2 Works.mp4

02:34

3. Using OpenID Connect for Authentication and Authorization.mp4

02:29

4. OAuth2 and OpenID Connect Flows.mp4

02:58

5. Inspecting an Access Token.mp4

02:27

6. Summary.mp4

01:07

07. Securing Your API

01. Coming Up.mp4

01:21

02. The Authorization Code Flow with PKCE Protection.mp4

02:52

03. Demo - Securing Access to Your API (Part 1).mp4

01:58

04. API Scopes vs. API Resources.mp4

03:38

05. Demo - Securing Access to Your API (Part 2).mp4

07:11

06. Demo - Passing an Access Token to Your API.mp4

06:15

07. Demo - Using Access Token Claims When Getting Resources.mp4

04:31

08. Including Identity Claims in an Access Token.mp4

01:19

09. Demo - Including Identity Claims in an Access Token.mp4

01:14

10. Demo - Protecting the API When Creating a Resource (with Roles).mp4

04:27

11. Summary.mp4

01:33

08. Authorization Policies and Access Control

01. Coming Up.mp4

01:10

02. Role-based Access Control vs. Attribute-based Access Control.mp4

03:03

03. Demo - Creating an Authorization Policy.mp4

07:24

04. Demo - Using an Authorization Policy (Web Client).mp4

03:23

05. Demo - Using an Authorization Policy (API).mp4

04:03

06. Fine-grained Policies with Scopes.mp4

01:11

07. Demo - Fine-grained Policies with Scopes.mp4

06:06

08. Extending Authorization Policies with Requirements and Handlers.mp4

03:00

09. Demo - Creating Custom Requirements and Handlers.mp4

09:07

10. Summary.mp4

01:09

09. Dealing with Token Expiration, Reference Tokens,and Token Revocation

01. Coming Up.mp4

00:56

02. Token Lifetimes and Expiration.mp4

02:27

03. Demo - Token Lifetimes and Expiration.mp4

02:54

04. Gaining Long-Lived Access with Refresh Tokens.mp4

02:43

05. Demo - Gaining Long-lived Access.mp4

05:22

06. Working with Reference Tokens.mp4

02:02

07. Demo - Working with Reference Tokens.mp4

04:45

08. Token Revocation.mp4

01:12

09. Demo - Revoking Tokens.mp4

05:33

10. Token Validation.mp4

06:01

11. Summary.mp4

02:12

10. Storing Users and Credentials in a Local Database

01. Coming Up.mp4

00:52

02. How Credentials Fit in OpenID Connect.mp4

01:41

03. Means of Authentication and Approaches.mp4

04:46

04. Implementation Approaches - Custom, ASP.NET Core Identity and the Micro.mp4

05:47

05. Inspecting the User Database Schema.mp4

02:15

06. Demo - Creating a User Database.mp4

05:43

07. Interacting with IdentityServer.mp4

01:20

08. Demo - Inspecting UI Interaction with IdentityServer.mp4

06:50

09. Demo - Inspecting the User Service.mp4

01:28

10. Demo - Integrating IdentityServer with a Custom User Database.mp4

03:47

11. Building Your Identity with a Profile Service.mp4

01:37

12. Demo - Building Your Identity with a Profile Service.mp4

03:54

13. Summary.mp4

02:11

11. Best Practices for User Management

01. Coming Up.mp4

00:52

02. Where Should User Management Screens Live.mp4

02:30

03. Demo - Implementing a User Registration Screen.mp4

13:22

04. Safely Storing Passwords.mp4

08:26

05. Demo - Safely Storing Passwords.mp4

05:13

06. Activating an Account.mp4

01:52

07. Demo - Activating an Account.mp4

12:04

08. Additional User Management Related Best Practices.mp4

03:46

09. Password Policy Best Practices.mp4

01:57

10. Summary.mp4

01:25

12. Integrating with Active Directory, Azure Active Directory, and Social Logins

01. Coming Up.mp4

01:05

02. Handling Integration with Third-party Provid.mp4

04:00

03. Use Cases for Windows Authentication.mp4

01:18

04. Windows Authentication Beneath the Covers.mp4

02:59

05. Demo - Enabling Windows Authentication on II.mp4

04:14

06. Demo - Integrating Windows Authentication wi.mp4

10:21

07. Federation with Third-party Identity Provide.mp4

03:58

08. Demo - Inspecting Support for Federating wit.mp4

06:23

09. Integrating with Azure AD.mp4

01:46

10. Demo - Registering an Application on Azure A.mp4

06:20

11. Demo - Integrating with Azure AD.mp4

06:25

12. Demo - Registering an Application on Faceboo.mp4

03:55

13. Demo - Integrating with Facebook.mp4

04:28

14. Challenges When Integrating with Third-party.mp4

03:07

15. Integrating with Other Third-party Identity .mp4

01:33

16. Summary.mp4

02:48

13. User Provisioning, Federation, and Federated Identity

01. Coming Up.mp4

00:48

02. Integrating Local Users with External Users.mp4

01:40

03. Federated Authentication and Federated Identity.mp4

03:47

04. Demo - Enhancing the Database Schema for Federated Identity.mp4

02:40

05. Demo - Provisioning a New User with a Federated Identity (Part 1).mp4

06:36

06. Transforming Claims.mp4

00:54

07. Demo - Provisioning a New User with a Federated Identity (Part 2).mp4

03:28

08. Provisioning a New User with a Federated Identity Flow Variations.mp4

01:59

09. Demo - Linking a Provider to an Existing User.mp4

06:58

10. Additional Federated Identity Use Cases.mp4

01:35

11. Summary.mp4

01:49

14. Supporting Multi-factor Authentication

1. Coming Up.mp4

00:37

2. Introducing Multi-factor Authentication.mp4

02:40

3. Supporting MFA with a One-Time Password Through Email.mp4

02:12

4. Supporting MFA with an Authenticator Application.mp4

05:22

5. Demo - Supporting MFA with an Authenticator Application (Enhancing the Database Sch.mp4

01:34

6. Supporting MFA with an Authenticator Application (Registration).mp4

13:02

7. Supporting MFA with an Authenticator Application - Authentication.mp4

02:32

8. Demo - Supporting MFA with an Authenticator Application (Authentication).mp4

04:20

9. Summary.mp4

01:30

15. Integrating with ASP.NET Core Identity

1. Coming Up.mp4

00:16

2. Integrating with ASP.NET Core Identity.mp4

01:34

3. Demo - Adding ASP.NET Core Identity.mp4

16:49

4. Summary.mp4

00:28

16. Getting Ready for Production and Deploying Your Identity Provider

01. Coming Up.mp4

00:48

02. Deploying IdentityServer to Azure.mp4

07:47

03. Demo - Persisting Configuration Data.mp4

10:25

04. Demo - Persisting Operational Data.mp4

02:42

05. Demo - Moving From SQLite to SQL Azure.mp4

05:53

06. Demo - Configuring Data Protection.mp4

10:03

07. Demo - Storing Key Material in Azure KeyVault.mp4

07:27

08. Demo - Configuring and Using the Forwarded Headers Midd.mp4

02:37

09. Demo - Applying a License.mp4

01:32

10. Demo - The Final Deployment.mp4

07:30

11. Summary.mp4

02:42

Description

In this course you’ll learn how to secure your ASP.NET Core 6 web applications and APIs with today’s de facto standards: OAuth2 and OpenID Connect.

What You'll Learn?

You've built a web application, an API, or both with ASP.NET Core 6, but... something seems to be missing: almost all applications need to be secured these days.

In this course, Securing ASP.NET Core 6 with OAuth2 and OpenID Connect, you'll learn how to use today's standards, OAuth2 and OpenID Connect, to secure ASP.NET Core 6 web applications and APIs.

You’ll learn what these standards are and how to implement them. After that, you’ll learn about authorization and authorization policies, storing your users and integrating with other identity providers. Finally, you’ll learn how to get ready for production and deploy your identity provider.

After this course you'll know the ins and outs of securing ASP.NET Core 6 web applications and APIs with OAuth2 and OpenID Connect.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

ASP.NET Core

Kevin Dockx

Instructor's Courses

Kevin Dockx is a freelance solution architect, author & consultant, living in Antwerp (Belgium). He's mainly focused on solution/application architectures & security for web-based (API) applications built with .NET, but he also keeps an eye out for new developments concerning other products from the .NET stack. He's a Microsoft MVP and board member of the RD MS Community. He's also a regular speaker at various (inter)national conferences & user group events, and works on various open source projects, like Microsoft.AspNet.JsonPatch & Marvin.Cache.Headers. Kevin likes to travel to places he hasn't seen before, and enjoys a good glass of wine in the company of a few good friends.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.