dotnet-api-security

JWT bearer token authentication in ASP.NET Core is implemented by configuring authentication middleware to validate token signatures and claims. This Skill provides implementation patterns for securing API endpoints using JWT alongside OAuth/OIDC.

Rate limiting in ASP.NET Core APIs is configured using built-in middleware to restrict request frequency and prevent abuse. This Skill guides setting up rate limiting to block brute-force attacks on sensitive endpoints.

Role-based and policy-based authorization in ASP.NET Core are configured by defining policies and assigning roles to restrict access to API resources. This Skill covers establishing authorization policies to ensure only authorized users access sensitive data.

Passkeys and passwordless authentication are integrated in ASP.NET Core using WebAuthn standards. This Skill provides guidance on implementing modern passwordless authentication flows for secure API access.

CORS policies and Content Security Policy (CSP) headers are configured in ASP.NET Core to control cross-origin access and mitigate injection threats. This Skill covers setting up essential security headers for secure API development.

ASP.NET Core Identity works with API endpoints to manage user registration and login flows. This Skill demonstrates configuring Identity to authenticate users accessing sensitive API data.