|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/secure-net-microservices-with-identityserver4-oauth2openid/
课程评论：没有评论
课程名称：使用IdentityServer4 OAuth2和OpenID保护.Net微服务 课程概述：本课程将教您如何使用独立的Identity Server 4和Ocelot API网关来保护微服务。您将学习如何使用OAuth 2和OpenID Connect在IdentityServer4中保护ASP.NET Web MVC和API应用程序。通过使用令牌、处理声明、认证与授权中间件、应用策略等方式来保护您的Web应用程序和API。 课程将指导您通过使用OAuth 2和OpenID Connect在分布式微服务架构中开始保护ASP.NET微服务应用程序。同时，您还将学习如何通过Ocelot API Gateway保护受保护的API。在整个课程中，您将逐步开发四个ASP.NET Core微服务项目。 首先，我们将开发Movies.API项目，并通过IdentityServer4的OAuth 2.0实现来保护此API资源。我们将生成JWT令牌并使用该令牌来保护Movies.API的资源。接下来，我们将开发Movies.MVC ASP.NET项目，为我们的应用程序创建交互式客户端。此客户端应用程序将通过OpenID Connect在IdentityServer4中进行安全保护，登录后获得JWT。 此外，我们还将开发一个集中的独立身份认证服务器，使用IdentityServer4包实现身份验证和访问控制。IdentityServer4是一个开源框架，采用OpenID Connect和OAuth2协议，可用于.Net Core。 最后，我们将开发Ocelot API Gateway，安全保护API资源，使用JWT令牌进行身份验证。客户端在获得Bearer令牌后，将调用经过Ocelot前端处理的API端点。Ocelot以反向代理的形式工作，一旦请求被路由到内部API，它便会在授权管道中将令牌呈现给Identity Server。如果客户端获得授权，请求将被处理，并将电影列表返回给客户端。 在课程的最后部分，您将进行安全操作的作业，通过Identity Server集成为现有的微服务参考应用程序扩展功能。 本课程非常实用，90%以上的课程内容将涉及您与我一起进行编码的练习。如果您是通过实践学习的类型，那么本课程非常适合您。课程中使用Visual Studio 2019作为代码编辑器，您也可以使用任何您喜欢的代码编辑器，操作系统只需是Windows或Mac即可。 通过本课程，您将获得实际的理解，掌握如何使用IdentityServer4、OAuth2、OpenID Connect和Ocelot API Gateway来保护.Net微服务。
You will learn how to secure microservices with using standalone Identity Server 4 and backing with Ocelot API Gateway. We're going to protect our ASP.NET Web MVC and API applications with using OAuth 2 and OpenID Connect in IdentityServer4. Securing your web application and API with tokens, working with claims, authentication and authorization middlewares and applying policies, and so on.This course will led you get started securing your ASP.NET based microservices applications with IdentityServer4 using OAuth 2 and OpenID Connect on distributed microservices architecture. And Also you'll learn how to secure protected APIs backing with Ocelot API Gateway in a microservices architecture.Check the overall picture You can see that we will have 4 Aspnet core microservices project which we are going to develop one by one and together.Movies.APIFirst of all, we are going to develop Movies.API project and protect this API resources with IdentityServer4 OAuth 2.0 implementation. Generate JWT Token with client_credentials from IdentityServer4 and will use this token for securing Movies.API protected resources.Movies.MVCAfter that, we are going to develop Movies.MVC Asp.Net project for Interactive Client of our application. This Interactive Movies.MVC Client application will be secured with OpenID Connect in IdentityServer4. Our client application pass credentials with logging to an Identity Server and receive back a JSON Web Token (JWT).Identity ServerAlso, we are going to develop centralized standalone Authentication Server and Identity Provider with implementing IdentityServer4 package and the name of microservice is Identity Server.Identity Server4 is an open source framework which implements OpenId Connect and OAuth2 protocols for.Net Core.With Identity Server, we can provide authentication and access control for our web applications or Web APIs from a single point between applications or on a user basis.Ocelot API GatewayLastly, we are going to develop Ocelot API Gateway and make secure protected API resources over the Ocelot API Gateway with transferring JWT web tokens. Once the client has a bearer token it will call the API endpoint which is fronted by Ocelot. Ocelot is working as a reverse proxy.After Ocelot re-routes the request to the internal API, it will present the token to Identity Server in the authorization pipeline. If the client is authorized the request will be processed and a list of movies will be sent back to the client.Also over these overall picture, we have also apply the Claim based authentications.By the end of this course, you will have a practical understanding of how to secure.Net Microservices with IdentityServer4 using OAuth2, OpenID Connect and Ocelot Api Gateway.Secure Existing Microservices ArchitectureIn the last section, we will give an assignment for security operations with identity server integration for an existing microservices reference application. We had developed run-aspnetcore-microservices reference application before this course. We will extend this application with IdentityServer OAuth 2.0 and OpenId Connect features with adding new Identity Server Microservice.Is this course for you?This course is very practical, about 90%+ of the lessons will involve you coding along with me on this project. If you are the type of person who gets the most out of learning by doing, then this course is definitely for you. Tools you need for this courseIn this course all the lessons are demonstrated using Visual Studio 2019 as a code editor. You can of course use any code editor you like and any Operating system you like as long as it's Windows or Mac.
