Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0
summary
Covers concrete ASP.NET Core features: Kestrel edge support and HTTPS, the data protection key rolling demo (keys persisted as XML, default 90‑day rotation, DPAPI or certificate to protect at rest, Redis/DB storage), cookie session mechanics and Safari’s ~4KB cookie limit, authentication handlers + scheme routing, policy and resource‑based authorization, ASP.NET Identity for password/MFA handling, and a live flow showing JWT access + refresh tokens and IdentityServer4 in templates issuing bearer tokens used in Authorization headers.
AI-written summary · about
chapters (22)
- 0:00Intro
- 2:31Modern Application Architecture
- 4:11Hosting
- 5:47Kestrel Security
- 7:27ASP.NET Core Architecture
- 11:50Data Protection in ASP.NET Core
- 18:47Who uses Data Protection?
- 19:54Authentication in ASP.NET Core
- 23:10Setting up authentication
- 27:05Interacting with the authentication system (2)
- 29:57Advanced Features
- 32:39External Authentication
- 34:09Example: Sign-in & Token Request w/ Openi Connect
- 35:43API Authentication
- 47:24Example Authorization Policy
- 48:56Programmatically using policies
- 50:49Custom Authorization Handler
- 52:31Resource-based Authorization
- 53:11Example: Document resource
- 53:36Invoking the authorization handler
- 53:50ASP.NET Identity
- 56:03The missing link
related talks
52mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
01h 01mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
53mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
40mSecurity in ASP.NET Core 2.1
54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
58mSecurity in ASP.NET Core 2.0
01h 01mSecurity in ASP.NET Core 2.0
01h 04mSecurity in ASP.NET Core 2.1