Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Practical OAuth, OpenID and JWT in C# .NET Core
Rating: 4.1 out of 5(67 ratings)
622 students

Practical OAuth, OpenID and JWT in C# .NET Core

Get hands on with these standards and technologies in .NET Core
Created byOmar McIver
Last updated 10/2021
English
English [Auto],

What you'll learn

  • Understand OAuth, OpenID and JWT
  • Implement Microsoft Identity (OpenID) server side and client side
  • Consume any OAuth provider using .NET Core C# 5.0
  • Consume any OpenID provider using .NET Core C# 5.0
  • Create and configure your own Identity Provider
  • Use a 'Front door key' pattern to secure your applications

Course content

5 sections • 17 lectures • 5h 13m total length

  • Course Overview4:06

    Master practical OAuth, OpenID Connect, and JWT concepts with C# and .NET Core 5.0. Build and extend Microsoft Identity libraries for server and client apps, explore PKCE, and manage claims.

  • What are OAuth, OpenID and JWT? Part 1: OAuth26:40

    Discover the fundamentals of OAuth, OpenID and JWT, focusing on OAuth 2.0 authorization code flow and implicit flow, including access tokens, refresh tokens, and the authorization server.

  • OAuth Knowledge Check
  • What are OAuth, OpenID and JWT? Part 2: OpenID10:33

    Explore OpenID Connect as an extension of OAuth, detailing authorization code, implicit, and hybrid flows, and how ID tokens, claims, and barcodes convey user identity.

  • OpenID Knowledge Check
  • What are OAuth, OpenID and JWT? Part 3: JSON Web Tokens7:59

    Learn how JSON Web Tokens encode claims in a signed, base64-encoded structure with a header, payload, and signature, and how public/private keys verify integrity for secure OpenID Connect flows.

  • JWT Knowledge Check
  • Implementing Microsoft Identity for a Web App33:05

    Implement Microsoft Identity for a web app using the Microsoft Identity Framework and OpenID Connect with Azure AD. Configure authentication, authorization, and token flows in a .NET Core web API.

  • Implementing Microsoft Identity for a SPA54:45

    Implement Microsoft identity for a single-page React app using authorization code flow with PKCE, MSAL, and token-based access to Microsoft Graph and a weather API.

  • Let's talk PKCE for a minute13:30

    this lecture explains why implicit flow existed, introduces PKCE as a short-lived, on-the-fly secret used with the authorization code flow, and shows secure OAuth and OpenID adoption.

  • PKCE Knowledge Check

Requirements

  • A basic understanding of what OAuth is used for
  • Basic development of Web APIs in C# .NET Core 5.0
  • Basic development of React Single Page Applications (Optional)

Description

OAuth (2.0), OpenID, and JWT pretty much go hand-in-hand with new web application development today. Especially for an enterprise setting where security controls are the top priority!

In this course, we will focus on the key understandings needed to put these technologies and standards into action.

We will build practical examples using .NET Core C# 5.0.

By the end of the course, we will have spanned both basic and complex integrations of Identity services.

Supporting a custom Identity provider in your application is a real bonus (if not a requirement) for Enterprise customers.

Many of the 3rd party services and tools used to implement authentication and authorization are easy to switch on with a few lines of code.

However, without this practical hands-on experience integration OAuth, OpenID, and JWT, Enterprise grown Identity Providers are often out of reach.

This course is for you if:

  • You've never worked with OAuth, OpenID, or JWT in your applications before, or,

  • You've used example code from Microsoft documentation with varied success or confidence in the solution, or,

  • You want to understand how these standards are leveraged in native .NET Core code, or,

  • You want to understand how to implement identity-based Microservice APIs, or,

  • You want to integrate with a custom Enterprise Identity Provider built on OAuth or OpenID


Who this course is for:

  • Beginner and intermediate developers who want to learn and overcome OAuth integration challenges
  • Cloud architects who want to understand common OAuth integration challenges
  • Developers who need to implement OAuth or OpenID in their application and must integrate a custom enterprise identity provider

Report abuse