ASP.NET Core: Security

Introduction

• Secure your .NET Core apps
• What you should know

1. Common Vulnerabilities in Apps

• Common security vulnerabilities
• Object binding attack
• Dangerous uploaded file type attack
• Excessive authentication attempts
• XSS and CSRF
• SQL injection attack
• Same-origin policy and CORS

2. Using the Data Protection API to Secure .NET Core Apps

• What is data protection API?
• Consuming data protection in .NET Core
• Configuring data protection in .NET Core
• Data protection key storage providers

3. Using Identity Framework to Secure .Net Core Apps

• What is ASP.NET Core Identity?
• Authentication in .NET Core
• Authorization in .NET Core
• Managing application secrets

4. Authentication in .NET Core Using IdentityServer

• Why token-based authentication?
• Configuring IdentityServer in .NET Core
• Defining identity and API resources
• Defining identity clients
• Adding UI to IdentityServer
• Adding ASP.Net Core MVC client app
• Configuring MVC with IdentityServer

Conclusion

• Where to go next?