API Development: Web API Security

With distributed systems using potentially hundreds of API endpoints web APIs must employ advanced authentication and authorization techniques and ensure protection against common web-based security attacks. In this course youll explore the function and characteristics of Web API authentication and authorization before learning how to use local logins and external authorization services. Next youll learn how to prevent cross-site request forgery (CSRF) attacks enable cross-origin requests in Web API 2 and use Web API filters. Youll then implement various authentication methods namely basic authentication forms authentication and integrated windows authentication. Finally youll learn how to enforce SSL in a Web API controller.