Dive into the intricate world of ASP.NET Core's authentication and authorization in this one-day course. While these topics can seem daunting, our goal is to demystify them, laying a strong foundation to secure your applications effectively. By mastering the content of this course, you'll be in an ideal position move into the world of OpenID Connect and ASP.NET Core Identity.

Please note: this course does not delve into OpenID Connect, OAuth, or ASP.NET Core Identity.

What to expect during the class:
Expect a blend of informative presentations, live demonstrations, and intensive hands-on exercises throughout the course, all updated to align with ASP.NET Core 8's latest features.

Target audience:
Developers and architects keen on mastering the fundamentals of authentication and authorization in ASP.NET Core.

Duration:
1 day

Prerequisites:
To make the most of this course, participants should be familiar with:
* The dynamics of HTTP(s) protocol, including its methods, headers, and cookies.
* A foundational grasp of how the web operates.
* Web and API development leveraging ASP.NET Core.
* Proficiency in C# and .NET.

Agenda:
In this course, we will cover the following:
* Introduction
* The Request Pipeline: From initiation to response.
* Dive into HttpContext and the User Object.
* Understanding ClaimsPrincipal & Claims.
* Authentication
* Exploring Schemes and Handlers.
* Mechanisms of Signing In/Out.
* Cookie authentication
* Unpacking SameSite.
* Cookie Lifespan: Sliding vs. Absolute Expiration.
* Cookie Security
* Data Protection API
* Configuration
* Keys and the keyring
* Claims management
* Authorization
* Policy-based Authorization: From basics to advanced.
* Crafting Simple to Advanced Policies.
* Diving into Requirements and Handlers.
* OpenID Connect
* Introducing OIDC handler
* Securing APIs
* JwtBearer handler

Requires Visual Studio 2022, with .NET 8. this is is a 1-day workshop.

Target ASP.NET Core developers.

this is a topic that I have developed many courses in and I also have many Stack Overflow badges in.