|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/securing-microservices-in-aspnetcore-world-netcore5/
课程评论:没有评论
**课程名称:**ASP.NET Core (netcore5) 中微服务的安全实践 **课程概述:** 本课程是一门全面深入的微服务安全与用户管理课程,专注于 ASP.NET Core 5 和 Entity Framework Core 5。您将学习如何使用代码优先方法创建数据库和表,以及如何开发和保护微服务应用。 **核心学习内容:** * **ASP.NET Core 5 和 EF Core 5 开发:** 掌握构建应用程序和使用 ORM 工具。 * **微服务基础与安全:** 开发简单的微服务应用,并使用 OAuth2 和 OpenId Connect 等协议进行安全加固。 * **PKCE 安全机制:** 学习并应用 PKCE 来增强应用程序安全性。 * **中心化授权服务器:** 构建一个实现 OAuth2 和 OpenId Connect 的中心化授权服务器,用于安全地保护微服务。 * **微服务间通信:** 了解如何使用 HttpClient 进行直接调用,以及如何使用 RabbitMQ 和 MassTransit 进行解耦的消息通信。 * **用户管理与 RBAC:** 在授权服务器中实现用户管理和基于角色的访问控制。 * **Serilog 日志集成:** 将 Serilog 集成到授权服务器,实现结构化日志记录,并可推广到其他微服务。 * **Microsoft Tye 工具应用:** * 使用 Tye 进行微服务的快速开发和部署。 * 利用 Tye 的服务发现功能。 * 通过 Tye 提供的仪表板监控微服务、数据库及日志。 * 理解并使用 `tye.yaml` 文件进行微服务编排,替代 `docker-compose.yaml`。 **课程特色:** 课程以清晰易懂的方式详细讲解实现最终目标的每一个步骤,旨在帮助您掌握最先进的技术和工具来保护您的应用程序。
This course is a very detailed course which is unique in the sense that it covers all aspects of security and user management in the microservices world.What you will learn in this course specifically as follows:You will learn how to develop applications using AspNet Core 5 and ORM tool Entityframeworkcore 5You will learn how a code-first approach is used to create databases and its tables corresponding to your model classes.How to develop simple microservices applications and secure them with specific protocols.Learn the two important security protocols (OAuth2 and OpenId Connect) used nowadays in microservices architecturesYou will learn how to add the latest state-of the art security mechanism called PKCE to enhance the security of your apps.How to secure microservices with a state of the art Centralized Authorization Server which implements the above two security protocolsHow to make microservices communicate with each other either using direct call over the wire by HttpClient.How to build User Management additions into the Authorization Server with role based authorizationHow to use RabbitMq and Masstransit for communication between microservices over messaging without tight couplingHow to incorporate Serilog logging into the Authorization Server for better and structured logging onto the console.(You can extend the same functionality into the other microservices by following the same procedure)How to use the new Microsoft technology Tool Microsoft Tye for easy development and deployment of microservicesLearn to use Microsoft Tye's service discovery functionalityLearn to use the dashboard that Microsoft Tye provides automatically for observing the elements(microservices, db servers etc.) of the application and the logs created automaticallyLearn to use tye.yaml file structure that replaces docker-compose.yaml files for microservices orchestration.Every detail towards our final goal is shown and explained in clear terms during the course. I hope you buy the course and enter into the world of safeguarding your applications with the best technology and tools available out there.