Take a deeper dive into OpenID Connect and explore how the password flow used earlier differs from other OpenID Connect flows. Discover additional resources for further learning at the end of this video.
- [Instructor] We used OpenIddict…to add the OpenID Connect password flow to the API.…There's more that OpenID Connect can offer…and a lot of it is outside the scope of this course.…I did wanna touch on a few points…so that you have a frame of reference…for further research and learning.…As a refresher, here's how the password flow works.…The client posted the user credentials…directly to the token endpoint…and got back an access token to use for further API calls.…I chose to demonstrate the password flow in this API…because it's fairly simple to set up.…
It does have some downsides though.…For example, the client has to directly capture…and handle the user's credentials…before sending them to the server.…There are other patterns available in OpenID Connect…that deal with this a little bit better.…One pattern you'll see a lot in larger systems…is splitting the responsibility of authenticating the user…and generating tokens away from the rest of the API.…In this arrangement,…OpenIddict would run in a different process…
- What is RESTful design?
- Building a new API with ASP.NET Core
- Using HTTP methods
- Returning JSON
- Creating RESTful routing with templates
- Securing RESTful APIs with HTTPS
- Representing resources
- Representing links
- Representing collections
- Sorting and searching collections
- Building forms
- Adding caching to an ASP.NET Core API
- Configuring user authentication and authorization
Skill Level Intermediate
1. REST API Concepts
2. Build a Basic API
3. Versioning and Errors
4. Secure the API
5. Represent Resources
6. Represent Links
7. Represent Collections
Add pagination7m 37s
8. Sorting Collections
9. Searching Collections
10. Forms and Modifying Data
11. Caching and Compression
12. Authentication and Authorization
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.