Book Image

Modern Web Development with ASP.NET Core 3 - Second Edition

By : Ricardo Peres
Book Image

Modern Web Development with ASP.NET Core 3 - Second Edition

By: Ricardo Peres

Overview of this book

ASP.NET has been the preferred choice of web developers for a long time. With ASP.NET Core 3, Microsoft has made internal changes to the framework along with introducing new additions that will change the way you approach web development. This second edition has been thoroughly updated to help you make the most of the latest features in the framework, right from gRPC and conventions to Blazor, which has a new chapter dedicated to it. You’ll begin with an overview of the essential topics, exploring the Model-View-Controller (MVC) pattern, various platforms, dependencies, and frameworks. Next, you’ll learn how to set up and configure the MVC environment, before delving into advanced routing options. As you advance, you’ll get to grips with controllers and actions to process requests, and later understand how to create HTML inputs for models. Moving on, you'll discover the essential aspects of syntax and processes when working with Razor. You'll also get up to speed with client-side development and explore the testing, logging, scalability, and security aspects of ASP.NET Core. Finally, you'll learn how to deploy ASP.NET Core to several environments, such as Azure, Amazon Web Services (AWS), and Docker. By the end of the book, you’ll be well versed in development in ASP.NET Core and will have a deep understanding of how to interact with the framework and work cross-platform.
Table of Contents (26 chapters)
1
Section 1: The Fundamentals of ASP.NET Core 3
7
Section 2: Improving Productivity
14
Section 3: Advanced Topics
Appendix A: The dotnet Tool

Authorizing access to resources

While forms normally use username and password pairs to enforce authentication, that is not normally the case with APIs. However, the concepts of both authentication and authorization apply, too; authorization is ensured by means of roles, claims, or custom rules, but authentication is usually achieved through JSON Web Tokens(JWTs). JWTs are similar to cookies, but cookies are stored in the browser and web APIs are not usually called by a browser but by an API client. ASP.NET Core offers a mechanism for checking both the authentication of a request and for checking that the requester is entitled to do what it wants to do. Explaining how to do this is the purpose of this chapter.

Using JWTs

JWTs are open-standard—defined in RFC 7519—securely representing claims betweentwo connectingpartiesusing HTTP for communication. The spec is available athttps://tools.ietf.org/html/rfc7519.

Using JWTs is similar to using...