User Authentication with ASP.NET Identity Course (How To)

In this course, you'll learn how to leverage user authentication to secure an application and protect your users' data. You'll update an existing ASP.NET MVC application to use Microsoft's ASP.NET Identity system to implement cookie-based authentication.

What you'll learn

• Support user registration and sign-in/sign-out
• Use authentication to restrict access to parts of an application
• Use SSL to secure communication between the client and server

Introducing ASP.NET Identity

We'll start with overview of authentication and authorization. And we'll see how HTTP cookies can be used to identify users across requests. Then we'll introduce the ASP.NET Identity system and install it into an existing ASP.NET MVC project.

Chevron 6 steps

• Welcome

  5:52

• How Does Authentication Work?

  5:04

• Understanding ASP.NET Identity and OWIN

  5:27

• instruction

  Reviewing the Project Files

• instruction

  Installing Identity

• Section Review

  5 questions

Adding User Registration

Now that we've installed Identity, we're ready to add a user registration page. Along the way, we'll learn about the key Identity classes that we'll leverage as we implement authentication in our application.

Chevron 10 steps

• Overview of Adding User Registration

  2:56

• instruction

  Adding the User Registration Page

• instruction

  Defining Our User Class

• instruction

  Adding the ApplicationUserManager and ApplicationSignInManager Classes

• instruction

  Updating Our DI Configuration

• instruction

  Configuring the Identity OWIN Middleware Component

• instruction

  Updating the Account Controller

• instruction

  Updating the Layout Page

• Reviewing User Registration

  6:25

• Section Review

  5 questions

Adding User Sign-In and Sign-Out

After providing our users with a way to register with our application, we're ready to support user sign-in and sign-out.

Chevron 7 steps

• Overview of Adding User Sign-In and Sign-Out

  1:18

• instruction

  Supporting Sign-In and Sign-Out

• instruction

  Refactoring the Menu Into a Partial View

• instruction

  Displaying the Current User's Identity

• instruction

  Restricting Access

• Reviewing User Sign-In and Sign-Out

  2:19

• Section Review

  5 questions

Segmenting and Protecting Data

Now that we know who are users are, we can use that information to segment our data. Then we can protect that data so that users can only view and/or modified their own data.

Chevron 11 steps

• Overview of Segmenting and Protecting Data

  1:52

• instruction

  Segmenting Data

• instruction

  Updating the Database Seed Data

• instruction

  Updating the Entries Repository

• instruction

  Updating the Entries List Page

• instruction

  Protecting User Data

• instruction

  Securing Communication Between the Client and Server

• instruction

  Preventing Cross-Site Request Forgery (CSRF)

• Reviewing Segmenting and Protecting Data

  6:49

• Wrap Up

  1:57

• Section Review

  5 questions