Learn whether Cross-Origin Resource Sharing (CORS) is important for your API, and how browsers enforce the same-origin policy.
- [Narrator] Another security concern you may come across…when building your API is dealing with CORS…or Cross-Origin Resource Sharing.…Not all APIs need to worry about CORS.…You only need to think about CORS…if your API is accessed by browsers…as opposed to other types of API clients.…This is true for APIs that power single page apps…where the single page app makes requests…via JAVA script to your API backend.…Even if this is the case, you still won't need…to worry about CORS unless your API…is hosted on a separate domain from the rest of your app.…
A common example is loading your single page app assets…from example.com but hosting your API backend…on api.example.com.…If both of these are true, you'll need to add…a CORS policy to your API.…To understand why we need CORS,…let's take a look at how browsers work.…Modern browsers enforce a security feature…called the Same-Origin Policy.…Browsers define the origin of a page…as the combination of the scheme, host,…and port portions or the URL.…
Two pages or locations have the same origin…
- What is RESTful design?
- Building a new API with ASP.NET Core
- Using HTTP methods
- Returning JSON
- Creating RESTful routing with templates
- Securing RESTful APIs with HTTPS
- Representing resources
- Representing links
- Representing collections
- Sorting and searching collections
- Building forms
- Adding caching to an ASP.NET Core API
- Configuring user authentication and authorization
Skill Level Advanced
1. REST API Concepts
2. Build a Basic API
3. Versioning and Errors
4. Secure the API
5. Represent Resources
6. Represent Links
7. Represent Collections
Add pagination7m 37s
8. Sorting Collections
9. Searching Collections
10. Forms and Modifying Data
11. Caching and Compression
12. Authentication and Authorization
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.