Building APIs for developers with Identity Server 4
summary
Shows how to protect a real ASP.NET Core API with IdentityServer4 using JWT Bearer Authentication and the token endpoint so clients exchange a merchant ID + secret for access tokens. Demonstrates an SDK that retries unauthorized calls, server-side validation with FluentValidation, EF-backed Identity for users, scoped access via IdentityServer scopes and policies, projecting EF models into response DTOs, non-sequential public display IDs, and a thread-safe random ID generator for collision-free identifiers.
AI-written summary · about
chapters (29)
- 0:00Introduction
- 4:10Demo
- 6:55API Design
- 10:00API Project Walkthrough
- 15:00Projections
- 20:00Service Endpoint
- 24:00Thread Safe Random
- 25:55Structured Logging
- 26:52Validation
- 27:40Solution Architecture
- 30:52Who is this for
- 31:27Identity
- 32:31User classes
- 35:03Payment controller
- 35:41Get API
- 36:21HTTP Client Factory
- 36:55Execute RealTime
- 37:39Post HTTP
- 41:55Access Token
- 45:45Signing Certificates
- 47:44Naming APIs
- 48:37Defining Identity Resources
- 51:01Client Store
- 51:19Merchant ID
- 51:58Token Type
- 53:55Recap
- 54:55Authorization
- 55:47API Keys
- 58:27Wrap up
related talks
01h 03mIdentity Server 4 with Angular and ASP.NET Core
54mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
51mCreating an Authentication System for Microservices with Identity Server 4
51mAuthentication and Authorization in ASP.NET Core 2
58mLet's talk Auth
01h 00mIdentityServer4: New & Improved for ASP.NET Core
01h 01mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0
55mIdentityServer for ASP.NET Core 2