Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
About MeWelcome to My World of .NET API SecurityHello, I am Aaron Pina, a dedicated C# developer and JWT Security Trailblazer in .NET API Security.
News
JWT Authentication in .NET: Building a Real OAuth 2.0 Authorization Server: Client Registration
In the previous article we finally turned our demo authorisation server into something that feels like a real OAuth 2.0 implementation.We consolidated the token and refresh endpoints into a single /token endpoint that dispatches on the official grant_type
Read more
Report
JWT Authentication in .NET: Creating an OAuth 2.0 Compatible Token Endpoint
Although this blog is focused on the role of JWTs in .NET APIs, when you begin to make a concerted study of the subject, you discover that JWTs are actually part of a wider authentication landscape. They're a central component of OAuth 2.0 and the propose
Read more
Report
Common JWT Attacks in .NET APIs (and How to Block Them)
If you're like me, whenever you watch a video tutorial about building .NET APIs, the teacher always gives you the minimum information necessary and seldom explains why you should do something.It's always like: "Here's this cool feature and everybody says
Read more
Report
From Demo JWT to Production JWT: Adding Proper Audience Validation
I originally planned for this article to focus on common JWT attacks in ASP.NET API's. But while reviewing the code from this series, I realised an important gap: We hadn't properly covered audience validation.In earlier articles, we intentionally kept th
Read more
Report
Lazy JWT Key Rotation in .NET: Redis-Powered JWKS That Just Works
In the previous article we added the two standard JWKS discovery endpoints to our authentication server.As part of the OpenId Connect (OIDC) protocol, the first of these endpoints enables an API to discover where the other relevant endpoints are and the s
Read more
Report
Pro access
Upgrade to see all 12 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.