Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0

Explore the security features of ASP.NET Core 2.2 and 3.0 in this comprehensive conference talk. Gain insights into modern application architecture, hosting, and Kestrel security. Delve into ASP.NET Core architecture, data protection, and authentication setup. Learn about session management, external authentication, and API security scenarios enabled by IdentityServer. Discover how to implement authorization policies, custom handlers, and resource-based authorization. Examine ASP.NET Identity and its role in securing web applications and APIs. Master the latest techniques for building robust, standards-based authentication and single sign-on solutions using Microsoft's integrated IdentityServer4 project templates.

Intro
Modern Application Architecture
Hosting
Kestrel Security
ASP.NET Core Architecture
Data Protection in ASP.NET Core
Who uses Data Protection?
Authentication in ASP.NET Core
Setting up authentication
Interacting with the authentication system (2)
Session Management (2)
Advanced Features
External Authentication
Example: Sign-in & Token Request w/ Openi Connect
API Authentication
Example Authorization Policy
Programmatically using policies
Custom Authorization Handler
Resource-based Authorization
Example: Document resource
Invoking the authorization handler
ASP.NET Identity
The missing link