Building Microservices with .NET – Security and Identity

您了解基础知识，但仍有许多问题需要回答：您的用户将如何注册和登录您的系统？您的微服务如何保护自己免受未经授权的访问？您的用户在不同的微服务中拥有哪些权限？通过添加一个基本组件：安全性，将您的微服务架构提升到一个新的水平。

在本课程中，您将建立一个全新的微服务 Identity 微服务。该服务将允许用户通过 ASP.NET Core Identity 成员身份系统注册和登录系统，并且由于它与 IdentityServer 的集成而充当授权服务器和 OpenId 提供程序。有了这个，所有微服务都将使用现代授权协议（如 OAuth 2.0 和 OpenID Connect）来保护，这些协议是当今保护微服务的事实上的标准。

以下是您将在本课程中学到的一些内容：

创建身份微服务

通过 ASP.NET Core Identity 脚手架用户注册和登录 UI 组件

通过 IdentiyServer 建立授权服务器和 OpenID 提供者

在 Postman 中生成和使用 JSON Web Tokens

通过 OpenID Connect 实现身份验证

使用 PKCE 实现 OAuth 2.0 授权代码流

使用 ASP.NET Core 身份验证和授权保护您的微服务

在本地开发期间使用 .NET Secret Manager 存储密钥

实施基于角色和基于声明的安全性

本课程从我们在我的使用 .NET 构建微服务：基础课程中离开的时候开始。请先学习该课程，因为它提供了基本的微服务概念，这就是我们实施您将在本课程中保护的两个微服务。除此之外，一些基本的 C# 知识会很方便。

这是一门初学者级别的课程，所以我特意花时间以一种非常教化的方式解释每个新概念，以确保您理解您将要编写的代码的目的。您不会发现从外部或隐藏来源复制的魔法代码。当我将它们添加到项目中时，我将解释每一行代码。

我不假设您之前对 ASP.NET Core 应用程序的安全性或课程中使用的任何库、工具和技术的了解。只要你渴望边做边学，我想你会非常喜欢这门课程，因为我会在我们一起编写代码时解释我所做的一切。

在本课程结束时，您将拥有一个完全可用的 Identity 微服务，您的用户将能够注册并登录系统，并且在上一课程中创建的两个微服务都将得到适当的保护。但最重要的是，您将了解每一行代码，您将知道如何保护您的微服务以及我们最终实现的原因。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 28 lectures (4h 31m) | Size: 1.47 GB
Secure your microservices architecture with C#, OAuth 2.0, OpenID Connect, ASP.NET Core Identity and IdentityServer

What you’ll learn:
Stand up an authorization server and OpenID provider via IdentiyServer
Implement the OAuth 2.0 authorization code flow with PKCE
Secure your microservices with ASP NET Core authentication and authorization
Create an Identity microservice to manage user identity and secure all microservices
Scaffold user registration and login UI components via ASP NET Core Identity
Generate and use JSON Web Tokens in Postman
Implement authentication via OpenID Connect
Use the .NET Secret Manager to store secrets during local development
Implement role-based and claims-based security

Requirements
Basic C# knowledge
Completed the Building Microservices with .NET: The Basics course
A computer with Windows, Mac OSX or Linux installed

Description
You know the basics, but there are still many questions to answer: How will your users register and sign in to your system? How can your microservices protect themselves against unauthorized access? What permissions do your users have across the different microservices? Take your microservices architecture to the next level by adding a fundamental component: Security.

In this course you will standup a brand new microservice, the Identity microservice. This service will allow users to register and sign in to the system via the ASP.NET Core Identity membership system, as well as act as an authorization server and an OpenId provider thanks to its integration with IdentityServer. With that, all microservices will be protected using modern authorization protocols like OAuth 2.0 and OpenID Connect, the de-facto standards for securing microservices these days.

Here for some of the things you will learn in this course:

Create an Identity microservice

Scaffold user registration and login UI components via ASP.NET Core Identity

Stand up an authorization server and OpenID provider via IdentiyServer

Generate and use JSON Web Tokens in Postman

Implement authentication via OpenID Connect

Implement the OAuth 2.0 authorization code flow with PKCE

Secure your microservices with ASP.NET Core authentication and authorization

Use the .NET Secret Manager to store secrets during local development

Implement role-based and claims-based security

This course starts right were we left off in my Building Microservices with .NET: The Basics course. Please take that course first since it provides foundational microservices concepts and that’s were we implement the two microservices you will secure in this course. Other than that, some basic C# knowledge would be handy.

This is a beginner level course, so I intentionally take my time to explain every new concept in a very didactic way to ensure you understand the purpose of the code you are about to write. You will find no magic code copied from external or hidden sources. I will explain every line of code as I add them to the projects.

I make no assumptions on your previous knowledge of security in ASP.NET Core apps or of any of the libraries, tools and techniques used during the course. As long as you are eager to learn by doing, I think you will really enjoy this course since I will explain everything I do as we write the code together.

By the end of this course you will have a fully working Identity microservice, your users will be able to register and sign in to the system and both the microservices created in the previous course will be properly secured. But most importantly you will understand every line of code, you will know how to secure your microservices and why we ended up with the final implementation.

Who this course is for
Beginner C# / .NET developers wanting to learn how to secure their microservices
Experienced C# / .NET developers wanting to get a deep understanding of security in a microservices architecture
Anyone willing to learn by doing. Even if you have never secured an ASPNET Core app you should not have problems with this course since I will explain every line of code in detail