1. dotnetConf
11/17/ :06 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Building Secure Web APIs with ASP.NET Core
dotnetConf
11/17/ :06 AM
Building Secure Web APIs with ASP.NET Core
Daniel Roth
Senior Program Manager
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Outline Overview Getting started Routing Formatting Swagger Security
dotnetConf
11/17/ :06 AM
Outline
Overview
Getting started
Routing
Formatting
Swagger
Security
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. ASP.NET Core (previously ASP.NET 5)
A new open-source and cross-platform framework for building modern cloud-based Web applications using .NET

5. ASP.NET frameworks - similar, but different
Web Pages
MVC
Web API
Razor
HTML Helpers
HTML Helpers
Controllers
Controllers
Actions
Actions
Filters
Filters
Model binding
Model binding DI DI

6. MVC + Web API + Web Pages = ASP.NET Core MVC

7. ASP.NET Core MVC One set of concepts – remove duplication
Web UI and Web APIs
Part of ASP.NET Core
Supports .NET Core
Runs on IIS or self-hosted
Deep integration with DI

8. Web API features Attribute routing Model binding and validation
Link generation
Formatting (JSON, XML) and content negotiation
Metadata generation (ex. Swagger)
Authorize access with JWT bearer tokens
JSON Patch
CORS

9. Getting started with ASP.NET Core
Install .NET Core from
Docs and tutorials at
Source code at

10. Let’s get started! dotnetConf 11/17/2018 11:06 AM Getting started
Installed from
File -> New Project -> ASP.NET Core Web API (or use Yeoman on a Mac)
Attribute routing
Route tokens (rename ValueController to TodoController)
Route constraints
Implement Post, link generation, [FromBody]
Add Swagger
Formatters
[Produces], [Consumes]
Add Range data annotation and validate a request
Azure AD org auth
Create new projects with work and school accounts (i.e. Office 365)
Show that the app and the middleware is preconfigured
Show the controller with the [Authorize] attribute
Switch to prebuilt app
Talk to sample todo list UI and sample on GitHub
Show update controller
Show angular client code and usage of ADAL
Run the application
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Thanks for watching! Get started: https://dot.net
dotnetConf
11/17/ :06 AM
Thanks for watching!
Get started:
Docs:
Join us on GitHub:
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. dotnetConf
11/17/ :06 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.