E29: ApiKeys 2/2, Securing External API's in ASP.Net Boilerplate
Channel: Lee Richardson
Date: 2020-06-21

In this episode Lee shows how to secure the ASP.Net Core external API he built in Episode 27.  He builds on the API Key CRUD work he implemented in Episode 28.  He shows how to hash passwords, utilize roles and permissions when creating API Keys, secure methods, extend automapper to work in additional projects, and finally update the command line app to use API Keys to retrieve a token with an API Key and Secret and use that token to authenticate all subsequent requests.

All code is available here: https://github.com/lprichar/LeesStore/pull/16

The blog post I mention isn't published yet, I'll update this description when it is, keep an eye on https://leerichardson.com in the next few days for that.