Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Secure Your APIs: JWT, Roles & Policies in ASP.NET Core
Important Introduction
About This Course
Telegram Group for This Course
🟦 Introduction - Course Orientation (Continuation Mode)
📖 How This Course Continues From Course #1 -Introduction to RESTFul API's? (16:52)
📖 Running & Verifying the Existing Student API (21:14)
📖 Security Upgrade Roadmap (25:15)
🟦 Module 1 — Security Audit (Why the Current API Is Unsafe)
📖 Security Audit — Attacking the Existing Student API (39:22)
❓ Quiz — Security Audit: Attacking the Existing Student API
📖 Defining Security Boundaries for Student Endpoints (24:35)
❓ Quiz — Defining Security Boundaries for Student Endpoints
🧱 Security Maturity Levels (Self-Read)
📖 Security Maturity Levels
❓ Quiz - Security Maturity Levels
🧠 Common API Security Myths (That Break Real Systems)
📖 Common API Security Myths (That Break Real Systems)
❓ Quiz - Common API Security Myths
🟦 Module 2 -📦🔐🧬 Encoding vs Encryption vs Hashing — Explained
📖 Encoding vs Encryption vs Hashing (13:19)
📖 Encoding (28:29)
🧪 Encoding Demo (.NET) — Encoding ≠ Security
📖 Encryption (25:52)
🧪 Encryption Demo (.NET) — Protecting data that must be read again
📖 Hashing (27:25)
❓ Quiz — Encoding vs Encryption vs Hashing
📖 🔐 Salting & Slow Hashing (Defending Against Real Attacks) (25:03)
🧪 Hashing Demo (.NET) — Protecting secrets that must never be revealed
❓ Quiz — 🔐 Salting & Slow Hashing (Defending Against Real Attacks)
🟦 Module 3 — Basic Shield (HTTPS + CORS)
📖 HTTPS for Beginners (32:12)
❓ Quiz - HTTPS for Beginners
📖 Enforcing HTTPS (22:55)
❓ Quiz - Enforcing HTTPS in ASP.NET Core
📖 CORS for Beginners (32:14)
❓ Quiz — CORS for Beginners
📖 🛠️ ASP.NET Core CORS Configuration (31:54)
❓ Quiz — 🛠️ ASP.NET Core CORS Configuration
📌 Where We Are Now — And Why We Must Continue
🟦 Module 4 — Authentication with JWT (Core Module)
📖 Why Authentication Is Needed Now? (20:25)
❓ Quiz — Why Authentication Is Needed Now?
📖 JWT Explained (Student Identity Analogy) (10:48)
❓ Quiz — JWT Explained (Student Identity Analogy)
📖 JWT Structure - Header, Payload & Signature Explained (9:00)
❓ Quiz — JWT Structure: Header, Payload & Signature
📖 Preparing Student Data for Login (In-Memory DB) (21:55)
📖🔐 Login Endpoint — Verifying Passwords & Issuing JWT (39:24)
📖🛠️ Protecting Student Endpoints with JWT Authentication Middleware (14:47)
🧪 📖 Testing Secured APIs with Swagger (JWT Authorization) (6:13)
🧪 📖 Testing Secured Student API Using a C# Console Client (7:42)
📌 Where You Are Now — And What Comes Next (7:21)
🔐🗄️ Storing the Security Key (Secrets Management)
📖 Why the JWT Security Key Must Never Leave the Server?
📖 What If the Server Gets Hacked?
📖 Storing the Security Key — Where Is the Safest Place?
📖 Storing the JWT Security Key Using Environment Variables
📖 Storing the JWT Security Key Using Azure Key Vault
📖 Using Azure Key Vault to Store the JWT Security Key (Step-by-Step)
🟦 Module 5 — Authorization with Roles (Admin vs Student)
📖 Role-Based Authorization — What Can Students and Admins Do? (13:02)
📖🛠️ Implementing Role-Based Authorization in the Student API (13:07)
🟦 Module 6 - Ownership Rules (Policies)
📖 🧭 Ownership-Based Authorization — Is This Your Data? (15:26)
📖 🛠️ Implementing Ownership Checks in the Student API (12:16)
❓ Quiz — Ownership-Based Authorization
Answering: What is middleware?
Answering : Can i save a lot of permissions in the token? is it Safe? (7:35)
Answering : Can i save a lot of permissions in the token? is it Safe?
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock