Securing ASP.NET using OpenID Connect and IdentityServer

24900 kr

OpenID Connect is the de-facto standard we should use for handling authentication and authorization in modern applications. However, it can still be very confusing with all the various concepts, including scopes, claims, flows, resources and tokens.

This course contains a lot of hands-on practical exercises where you will learn how to work with OpenID Connect and the latest version of Duende IdentityServer version 6.

Beskrivning

Today we face many authentication and authorization challenges when we’re designing and developing modern applications. The requirements are more challenging than ever, especially when we need to support everything from mobile and SPA applications, to microservices in the cloud.

OpenID Connect is the de-facto standard we should use for handling authentication and authorization in modern applications. However, it can still be very confusing with all the various concepts, including scopes, claims, flows, resources and tokens.

In this course, you will learn the following:

  • How OAuth and OpenID Connect work together in detail
  • How to set up an instance of IdentityServer
  • How to secure ASP.NET Core applications using OpenID Connect and IdentityServer

When we go through these things, we will not just configure some obscure magic libraries; instead, we will look under the hood of OpenID Connect and IdentityServer to understand what really makes them tick.

We recommend that you have a good computer that can run multiple instances of Visual Studio and at least one big monitor. In this course, we use ASP.NET Core 7 and IdentityServer 6.

After this course, we recommend you look at the course IdentityServer in Production, where we will teach you how to create a production-ready set-up of IdentityServer.

Target audience

ASP.NET Core developers who want to learn the fundamentals of OpenID Connect and how to protect applications using the latest version of IdentityServer. If you are using version 4 or 5 of IdentityServer, this course is still very relevant, as most things in this course are the same.

Prerequisites

Basic knowledge of

  • ASP.NET Core
  • C# (LINQ / Lambda…)
  • The HTTP(S) protocol and how the web works in general
  • HTML

Agenda

In this course, we will cover the following:

  • OAuth 2.1 / OpenID Connect
  • Certificates and HTTPS
  • Token services
  • Duende Identity Server v5.x
  • JSON Web Tokens (JWT)
  • Scopes and claims
    • Identity resources
    • API resources
    • APIScopes
  • Securing the tokens
  • Cross-origin resource sharing (CORS)
  • Flows
    • Implicit flow
    • Authorization code flow
    • Client credentials flow
  • Proof Key for Code Exchange (PKCE)
  • External identity providers
  • Application types:
    • Web applications
    • SPA and mobile applications
    • Server-to-server communication
  • ASP.NET Core
    • Authentication
    • Data Protection API
    • Cookie authentication
    • Authorization
    • OpenID Connect
    • Claims transformations

And much more…

 

Kursen levereras i samarbete med

Kontakta oss om denna kurs

Ytterligare information

Kurslängd

3 dagar

Lärarledd

Ja

Språk

Svenskt el Engelskt tal, material på engelska

Recensioner

Det finns inga recensioner än.

Endast inloggade kunder som har köpt denna produkt får lämna en recension.