Take the security of your ASP.NET Web API to the next level using some of the most amazing security techniques around
About This Book
- This book has been completely updated for ASP.NET Web API 2.0 including the new features of ASP.NET Web API such as Cross-Origin Resource Sharing (CORS) and OWIN self-hosting
- Learn various techniques to secure ASP.NET Web API, including basic authentication using authentication filters, forms, Windows Authentication, external authentication services, and integrating ASP.NET's Identity system
- An easy-to-follow guide to enable SSL, prevent Cross-Site Request Forgery (CSRF) attacks, and enable CORS in ASP.NET Web API
Who This Book Is For
This book is intended for anyone who has previous knowledge of developing ASP.NET Web API applications. Good working knowledge and experience with C# and.NET Framework are prerequisites for this book.
What You Will Learn
- Secure your web API by enabling Secured Socket Layer (SSL)
- Manage your application's user accounts by integrating ASP.NET's Identity system
- Ensure the security of your web API by implementing basic authentication
- Implement forms and Windows authentication to secure your web API
- Use external authentication such as Facebook and Twitter to authenticate a request to a web API
- Protect your web API from CSRF attacks
- Enable CORS in your web API to explicitly allow some cross-origin requests while rejecting others
- Fortify your web API using OAuth2
In Detail
This book incorporates the new features of ASP.NET Web API 2 that will help you to secure an ASP.NET Web API and make a well-informed decision when choosing the right security mechanism for your security requirements.
We start by showing you how to set up a browser client to utilize ASP.NET Web API services. We then cover ASP.NET Web API's security architecture, authentication, al3%