Securing Microservices in ASP.NET Core

Focused View

Kevin Dockx

3:45:07

21 View

1. Course Overview

1. Course Overview.mp4

01:26

1. course overview.zip

2. Securing Your First Microservice

1. Coming Up.mp4

01:05

1. coming up.zip

2. Course Prerequisites.mp4

00:58

2. course prerequisites.zip

3. Frameworks and Tooling.mp4

01:20

3. frameworks and tooling.zip

4. Inspecting the GloboTicket Demo Application.mp4

02:35

4. inspecting the globoticket demo application.zip

5. Demo - Getting Started with the Globoticket Demo Application.mp4

03:11

5. demo - getting started with the globoticket demo application.zip

6. Token-based Security for Microservices.mp4

06:56

6. token-based security for microservices.zip

7. Demo - Inspecting an Identity Service.mp4

06:09

7. demo - inspecting an identity service.zip

8. Accessing a Microservice on Behalf of the Client Application.mp4

02:03

8. accessing a microservice on behalf of the client application.zip

9. Demo - Blocking Access to a Microservice.mp4

04:10

9. demo - blocking access to a microservice.zip

10. Demo - Accessing a Microservice on Behalf of the Client Application.mp4

08:46

10. demo - accessing a microservice on behalf of the client application.zip

11. Using the Identity Microservice to Log In.mp4

02:04

11. using the identity microservice to log in.zip

12. Demo - Using the Identity Microservice to Log In.mp4

11:30

12. demo - using the identity microservice to log in.zip

13. Demo - Logging Out.mp4

02:57

13. demo - logging out.zip

14. Accessing a Microservice on Behalf of the User.mp4

01:16

14. accessing a microservice on behalf of the user.zip

15. Demo - Accessing a Microservice on Behalf of the User.mp4

06:16

15. demo - accessing a microservice on behalf of the user.zip

16. Summary.mp4

01:53

16. summary.zip

3. Improving Your Security with Service to Service and Token Exchange Patterns

1. Coming Up.mp4

00:43

1. coming up.zip

2. The Problems with One Token to Rule Them All.mp4

02:59

2. the problems with one token to rule them all.zip

3. Demo - Tightening Access with One Audience per Mi.mp4

05:01

3. demo - tightening access with one audience per mi.zip

4. Comparing Security Scenarios.mp4

03:05

4. comparing security scenarios.zip

5. Authorization with Scopes Inside of a Microservic.mp4

01:27

5. authorization with scopes inside of a microservic.zip

6. Demo - Authorization with Scopes Inside of a Micr.mp4

04:48

6. demo - authorization with scopes inside of a micr.zip

7. Downstream Service to Service Communication on Be.mp4

01:41

7. downstream service to service communication on be.zip

8. Supporting Token Exchange.mp4

02:45

8. supporting token exchange.zip

9. Demo - Adding Support for the Token Exchange Gran.mp4

06:28

9. demo - adding support for the token exchange gran.zip

10. Demo - Service to Service Communication on Behal.mp4

07:11

10. demo - service to service communication on behal.zip

11. Further Improvements.mp4

02:25

11. further improvements.zip

12. Summary.mp4

01:05

12. summary.zip

4. Implementing Security with API Gateway and BFF Patterns

1. Coming Up.mp4

00:36

1. coming up.zip

2. Exploring the API Gateway.mp4

02:01

2. exploring the api gateway.zip

3. A Common API Gateway Security Pattern.mp4

01:43

3. a common api gateway security pattern.zip

4. Introducing Ocelot.mp4

03:03

4. introducing ocelot.zip

5. Demo - Adding Ocelot.mp4

06:53

5. demo - adding ocelot.zip

6. Demo - Integrating Ocelot with Our Identity Service.mp4

05:38

6. demo - integrating ocelot with our identity service.zip

7. Passing User Information to a Microservice.mp4

02:00

7. passing user information to a microservice.zip

8. Demo - Passing User Information to a Microservice.mp4

05:32

8. demo - passing user information to a microservice.zip

9. The Backend-for-frontend Pattern.mp4

01:52

9. the backend-for-frontend pattern.zip

10. Summary.mp4

02:19

10. summary.zip

5. Improving the API Gateway Pattern

1. Coming Up.mp4

00:28

1. coming up.zip

2. Improving the API Gateway Pattern (Part 1).mp4

03:43

2. improving the api gateway pattern (part 1).zip

3. Demo - Making Microservices Responsible for Validating Incoming Tokens.mp4

04:32

3. demo - making microservices responsible for validating incoming tokens.zip

4. Demo - Configuring the Gateway for Scope-based Microservice Access Authorization.mp4

08:28

4. demo - configuring the gateway for scope-based microservice access authorization.zip

5. Improving the API Gateway Pattern (Part 2).mp4

01:42

5. improving the api gateway pattern (part 2).zip

6. Demo - Making the Gateway Responsible for Exchanging Tokens.mp4

11:23

6. demo - making the gateway responsible for exchanging tokens.zip

7. Summary.mp4

00:45

7. summary.zip

6. Enabling Long-lived Access and Token Stores

1. Coming Up.mp4

00:44

1. coming up.zip

2. Learning About Token Expiration.mp4

02:59

2. learning about token expiration.zip

3. Demo - Refreshing Tokens with IdentityModel.AspNetCore.mp4

03:42

3. demo - refreshing tokens with identitymodel.aspnetcore.zip

4. Refreshing and Storing Tokens When Flows Are Not Initiated by the User.mp4

02:16

4. refreshing and storing tokens when flows are not initiated by the user.zip

5. Demo - Adding Token Store Support for Custom Flows.mp4

05:43

5. demo - adding token store support for custom flows.zip

6. Summary.mp4

01:19

6. summary.zip

7. Securing Async Service Communication

1. Coming Up.mp4

00:38

1. coming up.zip

2. Approaches to Service Bus Security.mp4

03:24

2. approaches to service bus security.zip

3. Introducing the Upcoming Demos.mp4

01:26

3. introducing the upcoming demos.zip

4. Demo - Requesting a Token.mp4

04:37

4. demo - requesting a token.zip

5. Demo - Sending and Validating a Token.mp4

10:54

5. demo - sending and validating a token.zip

6. Dealing with Token Expiration.mp4

03:16

6. dealing with token expiration.zip

7. Demo - Dealing with Token Expiration.mp4

04:10

7. demo - dealing with token expiration.zip

8. Choosing the Right Security Approach for Your Use Case.mp4

03:03

8. choosing the right security approach for your use case.zip

9. Summary.mp4

01:37

9. summary.zip

Description

This course will teach you how to secure your ASP.NET Core microservices using a variety of best practice patterns for authentication and authorization.

What You'll Learn?

Authentication and authorization are two very important aspects of a secure microservices architecture. In this course, Securing Microservices in ASP.NET Core, you'll learn how to secure your microservices using a variety of best practice techniques for authentication and authorization. You'll learn how to work with an identity microservice, how to apply security with and without an API gateway, and how to improve upon the default security approach to reach a best-of-class implementation. By the end of this course you'll be comfortable implementing best-practice security techniques in microservices architectures.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

ASP.NET Core

Microservices

Kevin Dockx

Instructor's Courses

Kevin Dockx is a freelance solution architect, author & consultant, living in Antwerp (Belgium). He's mainly focused on solution/application architectures & security for web-based (API) applications built with .NET, but he also keeps an eye out for new developments concerning other products from the .NET stack. He's a Microsoft MVP and board member of the RD MS Community. He's also a regular speaker at various (inter)national conferences & user group events, and works on various open source projects, like Microsoft.AspNet.JsonPatch & Marvin.Cache.Headers. Kevin likes to travel to places he hasn't seen before, and enjoys a good glass of wine in the company of a few good friends.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.