Pro ASP.NET Web API Security: Securing ASP.NET Web API

✍ Scribed by Badrinarayanan Lakshmiraghavan (auth.)

• Publisher: Apress
• Year: 2013
• Tongue: English
• Leaves: 402
• Edition: 1
• Category: Library

✦ Synopsis

ASP.NET Web API is a key part of ASP.NET MVC 4 and the platform of choice for building RESTful services that can be accessed by a wide range of devices. Everything from JavaScript libraries to RIA plugins, RFID readers to smart phones can consume your services using platform-agnostic HTTP.

With such wide accessibility, securing your code effectively needs to be a top priority. You will quickly find that the WCF security protocols you're familiar with from .NET are less suitable than they once were in this new environment, proving themselves cumbersome and limited in terms of the standards they can work with.

Fortunately, ASP.NET Web API provides a simple, robust security solution of its own that fits neatly within the ASP.NET MVC programming model and secures your code without the need for SOAP, meaning that there is no limit to the range of devices that it can work with – if it can understand HTTP, then it can be secured by Web API. These SOAP-less security techniques are the focus of this book.

✦ Table of Contents

Front Matter....Pages i-xxvii
Welcome to ASP.NET Web API....Pages 1-11
Building RESTful Services....Pages 13-28
Extensibility Points....Pages 29-40
HTTP Anatomy and Security....Pages 41-79
Identity Management....Pages 81-101
Encryption and Signing....Pages 103-117
Custom STS through WIF....Pages 119-132
Knowledge Factors....Pages 133-162
Ownership Factors....Pages 163-189
Web Tokens....Pages 191-225
OAuth 2.0 Using Live Connect API....Pages 227-250
OAuth 2.0 from the Ground Up....Pages 251-282
OAuth 2.0 Using DotNetOpenAuth....Pages 283-318
Two-Factor Authentication....Pages 319-343
Security Vulnerabilities....Pages 345-373
Back Matter....Pages 375-388

✦ Subjects

Computer Science, general