Su	Mo	Tu	We	Th	Fr	Sa
31	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	1	2	3	4

Web API v2 Security with Dominick Baier

Posted By: ParRus

Date: 4 Oct 2015 19:33:32

Web API v2 Security

Genre: Video Tutorial / Development, Programming

Implementing Authentication and Authorization in ASP.NET Web API v2. The main feature focus of ASP.NET Web API v2 was security. There's a brand new authentication system and support for popular authentication methods, like OAuth2 tokens, that is already built-in. Additionally, it is now much easier to use Web APIs from JavaScript clients and the new security extensibility gives you powerful features to integrate your APIs in arbitrary security systems.

Content:
Overview
Overview
HTTP Security Primer
Overview
Transport Security
X.509 Certificates
SSL Handshake
Developers and SSL
Where to get Certificates from
Creating Certificates
Demo. Building an SSL Development Environment
Demo. Command Line Tools and Self-hosting
Demo. Fiddler and SSL Tracing
Validating Certificates using .NET APIs
Resources
ASP.NET Web API Security Architecture
Overview
The Security Pipeline
OWIN-Katana Hosting
OWIN Middleware
Message Handler
Authentication Filter
Authorization Filter
Accessing Client Identity
Demo. Security Pipeline
Demo. Hosting Options
Summary
Resources
Classic Authentication and Katana Authentication Middleware
Overview
Windows Authentication
Demo. Windows Authentication
Basic Authentication
Excursion. Katana Authentication Middleware
Demo. Basic Authentication
X.509 Client Certificates
Demo. Client Certificates and Combining Authentication Methods
Demo. Self Hosting
Summary
JavaScript and Browser-based Clients
Overview
Same Origin Policy
Implicit Browser Authentication
Cross Site Request Forgery (CSRF)
CSRF Mitigation
Demo. Implicit Authentication and CSRF
Demo. CSRF Mitigation using Anti-Forgery Tokens
Cross Origin Resource Sharing (CORS)
Demo. CORS support in Web API
Summary
Token-based Authentication - Part I
Overview
Modern Applications
Requirement and Complexity
OAuth2
Authorization Servers
Demo. Thinktecture AuthorizationServer
Trusted Applications
Demo. Resource Owner Credential Flow
Adding Refresh Tokens
Demo. Adding Refresh Tokens
Demo. AuthorizationServer and Resource Owner Flow
Excursion. JSON Web Tokens
Token-based Authentication - Part II
Native or Browser-based Clients
Implicit Flow
Confidential Clients
Demo. Authorization Code Flow
Federation and Delegation
Demo. Assertion Flow
Summary
Resources
Authorization
Overview
Client vs. User Authorization
Authorization Options
AuthorizeAttribute Usage and Internals
Custom Authorization Logic
Imperative Authorization
Demo. Authorization
Summary

also You can look my other last: Programming-posts

MediaInfo:

General
Complete name : 07. Demo. CSRF Mitigation using Anti-Forgery Tokens.mp4
Format : MPEG-4
Format profile : Base Media / Version 2
Codec ID : mp42
File size : 26.4 MiB
Duration : 5mn 57s
Overall bit rate mode : Variable
Overall bit rate : 618 Kbps
Encoded date : UTC 2014-04-11 03:41:29
Tagged date : UTC 2014-04-11 03:41:54
Writing application : HandBrake 0.9.8 2012071700

Video
ID : 1
Format : AVC
Format/Info : Advanced Video Codec
Format profile : Baseline@L3.1
Format settings, CABAC : No
Format settings, ReFrames : 2 frames
Format settings, GOP : M=1, N=50
Codec ID : avc1
Codec ID/Info : Advanced Video Coding
Duration : 5mn 57s
Bit rate mode : Variable
Bit rate : 487 Kbps
Width : 1 024 pixels
Height : 768 pixels
Display aspect ratio : 4:3
Frame rate mode : Variable
Frame rate : 15.000 fps
Minimum frame rate : 14.925 fps
Maximum frame rate : 15.152 fps
Color space : YUV
Chroma subsampling : 4:2:0
Bit depth : 8 bits
Scan type : Progressive
Bits/(Pixel*Frame) : 0.041
Stream size : 20.8 MiB (79%)
Writing library : x264 core 120
Encoding settings : cabac=0 / ref=2 / deblock=1:0:0 / analyse=0x1:0x111 / me=umh / subme=6 / psy=1 / psy_rd=1.00:0.00 / mixed_ref=1 / me_range=16 / chroma_me=1 / trellis=0 / 8x8dct=0 / cqm=0 / deadzone=21,11 / fast_pskip=1 / chroma_qp_offset=-2 / threads=12 / sliced_threads=0 / nr=0 / decimate=1 / interlaced=0 / bluray_compat=0 / constrained_intra=0 / bframes=0 / weightp=0 / keyint=50 / keyint_min=15 / scenecut=40 / intra_refresh=0 / rc_lookahead=40 / rc=crf / mbtree=1 / crf=20.0 / qcomp=0.60 / qpmin=3 / qpmax=69 / qpstep=4 / ip_ratio=1.40 / aq=1:1.00
Encoded date : UTC 2014-04-11 03:41:29
Tagged date : UTC 2014-04-11 03:41:54
Color primaries : BT.709-5, BT.1361, IEC 61966-2-4, SMPTE RP177
Transfer characteristics : BT.709-5, BT.1361
Matrix coefficients : BT.709-5, BT.1361, IEC 61966-2-4 709, SMPTE RP177

Audio
ID : 2
Format : AAC
Format/Info : Advanced Audio Codec
Format profile : LC
Codec ID : 40
Duration : 5mn 57s
Bit rate mode : Variable
Bit rate : 128 Kbps
Maximum bit rate : 205 Kbps
Channel(s) : 2 channels
Channel positions : Front: L R
Sampling rate : 44.1 KHz
Compression mode : Lossy
Stream size : 5.46 MiB (21%)
Language : English
Encoded date : UTC 2014-04-11 03:41:29
Tagged date : UTC 2014-04-11 03:41:53

Screenshots