Web API v2 Security with Dominick Baier

WEBRip | English | MP4 + Project Files | 1024 x 768 | AVC ~487 kbps | 15 fps
AAC | 128 Kbps | 44.1 KHz | 2 channels | 6h 12mn | 1.11 GB

Implementing Authentication and Authorization in ASP.NET Web API v2. The main feature focus of ASP.NET Web API v2 was security. There’s a brand new authentication system and support for popular authentication methods, like OAuth2 tokens, that is already built-in. Additionally, it is now much easier to use Web APIs from JavaScript clients and the new security extensibility gives you powerful features to integrate your APIs in arbitrary security systems.

Content:
Overview
Overview
HTTP Security Primer
Overview
Transport Security
X.509 Certificates
SSL Handshake
Developers and SSL
Where to get Certificates from
Creating Certificates
Demo. Building an SSL Development Environment
Demo. Command Line Tools and Self-hosting
Demo. Fiddler and SSL Tracing
Validating Certificates using .NET APIs
Resources
ASP.NET Web API Security Architecture
Overview
The Security Pipeline
OWIN-Katana Hosting
OWIN Middleware
Message Handler
Authentication Filter
Authorization Filter
Accessing Client Identity
Demo. Security Pipeline
Demo. Hosting Options
Summary
Resources
Classic Authentication and Katana Authentication Middleware
Overview
Windows Authentication
Demo. Windows Authentication
Basic Authentication
Excursion. Katana Authentication Middleware
Demo. Basic Authentication
X.509 Client Certificates
Demo. Client Certificates and Combining Authentication Methods
Demo. Self Hosting
Summary
JavaScript and Browser-based Clients
Overview
Same Origin Policy
Implicit Browser Authentication
Cross Site Request Forgery (CSRF)
CSRF Mitigation
Demo. Implicit Authentication and CSRF
Demo. CSRF Mitigation using Anti-Forgery Tokens
Cross Origin Resource Sharing (CORS)
Demo. CORS support in Web API
Summary
Token-based Authentication – Part I
Overview
Modern Applications
Requirement and Complexity
OAuth2
Authorization Servers
Demo. Thinktecture AuthorizationServer
Trusted Applications
Demo. Resource Owner Credential Flow
Adding Refresh Tokens
Demo. Adding Refresh Tokens
Demo. AuthorizationServer and Resource Owner Flow
Excursion. JSON Web Tokens
Token-based Authentication – Part II
Native or Browser-based Clients
Implicit Flow
Confidential Clients
Demo. Authorization Code Flow
Federation and Delegation
Demo. Assertion Flow
Summary
Resources
Authorization
Overview
Client vs. User Authorization
Authorization Options
AuthorizeAttribute Usage and Internals
Custom Authorization Logic
Imperative Authorization
Demo. Authorization
Summary