3. ASP.NET Core Security
Protect your ASP.NET Core back-end with industry-standard authentication and authorization techniques and be ready to handle real-world security challenges with confidence.
Course introduction
What this course covers
What you need to know first
Software prerequisites
Source code and other resources
Introduction
Why authentication?
What is token based authentication?
Understanding JSON Web Tokens
Creating JWTs
Decoding a JWT
Configuring JWT authentication
Sending requests with JWTs
Using JWT claims in ASP.NET Core
Disabling the default claims mapping
Knowledge check
Introduction
Adding the Shopping Basket data model
Implementing the Upsert Basket feature
Testing the Upsert Basket feature
Implementing the Get Basket feature
Knowledge check
Introduction
Why authorization?
Types of authorization in ASP.NET Core
Requiring authorization in API endpoints
Using role-based authorization
Using claims-based authorization
Using policy-based authorization
Refactoring the authorization policy
Configuring a fallback policy and anonymous access
Implementing an authorization handler
Using resource-based authorization
Knowledge check
Introduction
Introduction to Docker
Downloading Docker images
Running Docker containers
Exposing ports
Entering a running container
Using volumes
Using environment variables
Introduction to Docker Compose
Using Docker compose
Knowledge check
Introduction
Introduction to Keycloak
Running Keycloak as a Docker container
Creating a realm
Creating users
Creating and assigning roles
Exporting the realm configuration
Knowledge check