Professional C# and .NET, 2021st Edition

20Security

WHAT'S IN THIS CHAPTER?

• Working with authentication and authorization
• Creating and verifying signatures
• Implementing secure data exchange
• Using signing and hashing
• Handling web security

CODE DOWNLOADS FOR THIS CHAPTER

The source code for this chapter is available on the book page at www.wiley.com. Click the Downloads link. The code can also be found at https://github.com/ProfessionalCSharp/ProfessionalCSharp2021 in the folder 2_Libs/Security. The code for this chapter is divided into the following major examples:

• IdentitySample
• WebAppWithADSample
• X509CertificateSample
• SigningDemo
• SecureTransfer
• ASPNETCoreMVCSecurity

Samples from this chapter mainly use the namespace System.Security.Cryptography. All the sample projects have nullable reference types enabled.

ELEMENTS OF SECURITY

Security has several key elements that you need to consider for making your applications secure. The primary one, of course, is the user of the application. Is the person authorized to access the application or someone posing as that person? How can this user be trusted? As you see in this chapter, ensuring the security of an application regarding the user is a two-part process. First, users need to be authenticated, and then they need to be authorized to verify that they are allowed to use the requested resources.

What about data that is stored or sent across the network? Is it possible for someone to access this data, for example, by using a network sniffer? Encryption ...