The course Securing ASP.NET Core with OAuth2 and OpenID Connect - Kevin Dockx offers a comprehensive dive into securing ASP.NET Core web applications and APIs using industry-standard protocols. Beginning with an understanding of OAuth2 and OpenID Connect, participants learn to implement these standards effectively to bolster the security of their applications. From user authentication to authorization policies and access control, every facet of application security is explored to ensure robust protection against unauthorized access and data breaches.

Participants delve into practical considerations such as managing token expiration, handling reference tokens, revocation, and generating tokens for testing purposes. Best practices for securing JavaScript-based clients and managing user credentials are thoroughly covered, providing a solid foundation for building secure applications. Additionally, integration with various identity providers, including Active Directory, social logins, user provisioning, and federated identity concepts, are explained to enable seamless authentication across platforms.

concludes by equipping participants with the knowledge to prepare their identity provider for production and deploy it effectively. By the end, participants are empowered to confidently secure their ASP.NET Core applications and APIs using OAuth2 and OpenID Connect, ensuring their systems' and data's integrity and confidentiality.

Securing ASP.NET Core with OAuth2 and OpenID Connect - Kevin Dockx Table of contents :

1. Course Overview (Duration: 1 minute)
2. Getting Started with ASP.NET Core Security (Duration: 35 minutes)
3. Understanding Authentication with OpenID Connect (Duration: 42 minutes)
4. Securing Your User Authentication Processes (Duration: 56 minutes)
5. Working with Claims in Your Web Application (Duration: 23 minutes)
6. Understanding Authorization with OAuth2 and OpenID Connect (Duration: 12 minutes)
7. Securing Your API (Duration: 36 minutes)
8. Authorization Policies and Access Control (Duration: 43 minutes)
9. Dealing with Token Expiration, Reference Tokens, Token Revocation, and Generating Tokens for Testing (Duration: 50 minutes)
10. Best Practices for Securing JavaScript-based Clients (Duration: 34 minutes)
11. Storing Users and Credentials in a Local Database (Duration: 43 minutes)
12. Best Practices for User Management (Duration: 51 minutes)
13. Integrating with Active Directory, Microsoft Entra ID, and Social Logins (Duration: 64 minutes)
14. User Provisioning, Federation, and Federated Identity (Duration: 33 minutes)
15. Supporting Multi-factor Authentication (Duration: 33 minutes)
16. Integrating with ASP.NET Core Identity (Duration: 17 minutes)
17. Getting Ready for Production and Deploying Your Identity Provider (Duration: 59 minutes)