Book Image

ASP.NET Core 5 for Beginners

By : Andreas Helland, Vincent Maverick Durano, Jeffrey Chilberto, Ed Price
Book Image

ASP.NET Core 5 for Beginners

By: Andreas Helland, Vincent Maverick Durano, Jeffrey Chilberto, Ed Price

Overview of this book

ASP.NET Core 5 for Beginners is a comprehensive introduction for those who are new to the framework. This condensed guide takes a practical and engaging approach to cover everything that you need to know to start using ASP.NET Core for building cloud-ready, modern web applications. The book starts with a brief introduction to the ASP.NET Core framework and highlights the new features in its latest release, ASP.NET Core 5. It then covers the improvements in cross-platform support, the view engines that will help you to understand web development, and the new frontend technologies available with Blazor for building interactive web UIs. As you advance, you’ll learn the fundamentals of the different frameworks and capabilities that ship with ASP.NET Core. You'll also get to grips with securing web apps with identity implementation, unit testing, and the latest in containers and cloud-native to deploy them to AWS and Microsoft Azure. Throughout the book, you’ll find clear and concise code samples that illustrate each concept along with the strategies and techniques that will help to develop scalable and robust web apps. By the end of this book, you’ll have learned how to leverage ASP.NET Core 5 to build and deploy dynamic websites and services in a variety of real-world scenarios.
Table of Contents (19 chapters)
Section 1 – Crawling
Section 2 – Walking
Section 3 – Running

OAuth and OpenID Connect basics

Basic authentication is simple to implement, and if you need to work with legacy systems, there's a good chance you will run into it. It's not recommended to start new projects using basic authentication though.

There is no shortage of acronyms for protocols in the identity space, and .NET Framework has relied upon different authentication and authorization protocols over the years. We are not able to delve into all of them, nor to do a comparison of the strengths and weaknesses of them.

The most popular set of protocols used for AuthN and AuthZ purposes these days is OAuth and OpenID Connect (OIDC), so we will look at parts of both the theory and practical implementations. OAuth is the base protocol and OIDC builds on top of this, so there are some overlapping details we will get back to.

Looking back at basic authentication, we already mentioned that a drawback is the fact that the passwords are transferred over the wire. Both the...