Overview
-
Explore techniques for building secure ASP.NET Core applications and protecting against common attacks.
Syllabus
-
Introduction
- Secure your .NET Core apps
- What you should know
- Common security vulnerabilities
- Object binding attack
- Dangerous uploaded file type attack
- Excessive authentication attempts
- XSS and CSRF
- SQL injection attack
- Same-origin policy and CORS
- What is data protection API?
- Consuming data protection in .NET Core
- Configuring data protection in .NET Core
- Data protection key storage providers
- What is ASP.NET Core Identity?
- Authentication in .NET Core
- Authorization in .NET Core
- Managing application secrets
- Why token-based authentication?
- Configuring IdentityServer in .NET Core
- Defining identity and API resources
- Defining identity clients
- Adding UI to IdentityServer
- Adding ASP.Net Core MVC client app
- Configuring MVC with IdentityServer
- Where to go next?
