dotnet-api-security

JWT bearer authentication in ASP.NET Core is implemented by configuring authentication middleware to validate token signatures and claims. This Skill provides code examples to set up JWT bearer tokens, securing API endpoints for authenticated users.

Securing an ASP.NET Core API against brute-force attacks is best achieved through rate limiting strategies. This Skill configures rate limiting to protect API endpoints from abuse and mitigate common vulnerabilities like cross-site scripting.

Yes, you can use passkeys and WebAuthn for passwordless authentication in ASP.NET Core. This Skill integrates modern WebAuthn passkeys alongside ASP.NET Core Identity, OAuth/OIDC, and JWT bearer tokens.

Configuring CORS policies and CSP headers for a .NET API involves setting up specific security middleware. This Skill implements Content Security Policy headers and CORS origins to protect public-facing APIs from cross-site scripting.

Yes, this Skill supports policy-based authorization for ASP.NET Core endpoints. It configures authorization policies to secure endpoints, integrating seamlessly with JWT bearer authentication and ASP.NET Core Identity.