Learn how to use the Policy system in ASP.NET Core to create authorization rules that can be evaluated in your controllers and action methods to enforce permissions for users.
- [Instructor] We've talked a lot about authentication…but authorization is important too.…This API uses a simple role-based system for authorization.…Your API may use roles, claims, or maybe something else.…Regardless of how authorization is modeled in your API,…you'll need to perform authorization checks…in your controllers.…The policy system in ASP.NET Core…makes it easy to create and reuse authorization policies.…Policies are groups of authorization requirements…like role checks or claim checks,…that are defined in the start up class.…
Let's define a policy for users who can see…all other users in the system…instead of just seeing themselves.…I'll go ahead and open up the start up class…and we'll do this in configure services…which is getting pretty big now.…I'll just throw it in at the end here.…I'll do services.AddAuthorization.…Add some options…and I'll say options.AddPolicy.…We'll call this policy the viewAllUsersPolicy.…
And to define the policy we'll say…policy dot…RequireAuthenticatedUser which is kind of a given.…
- What is RESTful design?
- Building a new API with ASP.NET Core
- Using HTTP methods
- Returning JSON
- Creating RESTful routing with templates
- Securing RESTful APIs with HTTPS
- Representing resources
- Representing links
- Representing collections
- Sorting and searching collections
- Building forms
- Adding caching to an ASP.NET Core API
- Configuring user authentication and authorization
Skill Level Advanced
1. REST API Concepts
2. Build a Basic API
3. Versioning and Errors
4. Secure the API
5. Represent Resources
6. Represent Links
7. Represent Collections
Add pagination7m 37s
8. Sorting Collections
9. Searching Collections
10. Forms and Modifying Data
11. Caching and Compression
12. Authentication and Authorization
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.