ASP.NET MVC 5 Identity: Authentication and Authorization
1h 30mIntermediate2018-08-28
Authors
Ervis Trupja
Full-Stack .NET Web Developer with a mathematical background
Course details
Authentication and authorization are core features of many modern apps. So why reinvent the wheel, forcing your users to create yet another login? Leveraging credentials from trusted platforms like Facebook and Google, you can save yourself precious development time and improve the user experience. This course shows how to authenticate and authorize users of your ASP.NET MVC 5 applications using .NET methods as well as third-party frameworks. Instructor Ervis Trupja discusses the options for identity management in ASP.NET MVC 5, showing how to implement third-party authentication in your app with Facebook, Twitter, Google, Microsoft, and GitHub. He shows how to set up email confirmation and two-step authentication and control levels of authorization for users. Finally, he discusses how to secure ASP.NET apps against the seven most common vulnerabilities.
Learning objectives
Identity management
Authentication vs. authorization
Authentication via Facebook, Google, Microsoft, and more
Email confirmation
Two-step authentication
Simple, role-based, and view-based authorization
Defending against vulnerabilities
Learning objectives
Identity management
Authentication vs. authorization
Authentication via Facebook, Google, Microsoft, and more
Email confirmation
Two-step authentication
Simple, role-based, and view-based authorization
Defending against vulnerabilities
Skills covered
ASP.NET MVCASP.NETC#Identity and Access ManagementBack-End Web DevelopmentFull-Stack Web DevelopmentFront-End Web DevelopmentCybersecurityWeb DevelopmentMicrosoftDeep Dive (X:Y)
Concepts
0. Introduction
- 01 - Improve user experience with third party authentication
- 02 - What you need to know
1. Identity Management
- 03 - Membership in ASP.NET
- 04 - ASP.NET Identity
- 05 - Identity demo
- 06 - Authentication vs. authorization
- 07 - Common vulnerabilities in applications
2. Authentication
- 08 - Understand authentication and authentication options
- 09 - Create a new ASP.NET MVC 5 application
- 10 - Facebook authentication
- 11 - Twitter authentication
- 12 - Google authentication
- 13 - Microsoft authentication
- 14 - GitHub authentication
- 15 - Configure Windows authentication
- 16 - Email confirmation setup - SendGrid
- 17 - Email confirmation in action
- 18 - Two-factor authentication with SMS setup - Twilio
- 19 - Two-factor authentication with SMS in action
3. Authorization
- 20 - Understand authorization and authorization types
- 21 - Simple authorization
- 22 - Role-based authorization
- 23 - View-based authorization
- 24 - View-based authorization using the view model
4. Security
- 25 - Vulnerability - Object binding vulnerability
- 26 - Vulnerability - Dangerous uploaded file type
- 27 - Vulnerability - Excessive authentication attempts
- 28 - Vulnerability - XSS filter evasion
- 29 - Vulnerability - Inclusion of third-party ccripts
- 30 - Vulnerability - Cross-site request forgery (CSRF)
- 31 - Vulnerability - Open redirect
Conclusion
- 32 - Next steps