Share Description
In this course, you will learn :
- What are Identities, Claims, and Principal (Security Context)
- Cookie Authentication for Web App
- JWT Token Authentication for Web APIs / REST APIs
- Authentication and Authorization handlers
- Policy based Authorization
- Create and Handle Custom Authorization Policy
- ASPNET Core Identity Configuration
- Use Identity to cover all typical scenarios including: User Registration, User Login, Logout, Email confirmation, Roles vs Claims and User Profile page.
- MFA with Email
- MFA with Authentication App
- Social Media login with Facebook
Syllabus :
1. Web Security Under the Hood for Web Applications
- Authentication & Authorization Flow
- ASP.NET Core Basics
- Security Context in ASP.NET Core
- Anonymous Identity
- .Net 6 Update
- Create a Login Page
- Generate Cookie with Cookie Authentication Handler
- Read Cookie with Authentication Middleware
- Authorization Architecture & Flow
- Simple Policy based Authorization
- Login & Logout Partial View
- Custom Policy based Authorization
- Cookie Lifetime & Browser Session
2. Secure Web APIs
- Cookie vs Token and Our Use Case
- Create & Consume a Web API Endpoint
- What is JWT Token
- The Typical JWT Flow
- Generate JWT Token with JWT Token Handler
- Read JWT Token with Authentication Handler & Middleware
- Consume the Endpoint protected by JWT Token
- Store & Reuse Token in Session
- Apply Policy to WebAPI Endpoint
3. ASP.NET Core Identity
- The Three Essential Parts of Identity
- Create a Web App
- Install Nuget Packages for Working with Identity
- Create the Database for Identity
- Configure Web App to Use Identity
- Core Classes of Identity
- User Registration Workflow
- User Registration
- User Login
- Email Confirmation Flow
- Email Confirmation Dry Run
- Confirm Email Page
- Send Email
- Refactor Email Sending Code
- Sign Out
- Collecting More User Info with IdentityUser schema change
- Collecting More User Info with Claims
- Roles
- Create a User Profile page
4. ASPNET Core Identity MFA
- What is MFA
- How 2FA works through email
- Implement Email 2FA
- How 2FA with Authenticator App works
- Implement Authenticator MFA Setup (Manual)
- Implement Authenticator MFA Code Checking
- Use QR Code for MFA Setup
5. External Authentication Providers
- Overview of Login with Social Media Accounts
- Setup App Account in Facebook
- Delegate Login to Facebook
- Implement Callback Controller
