Securing ASP.Net WebAPI REST Services using an API Key and MessageHandlers

[@valmirfilho2194]

After 3 years ur video still is being helpful... Thanks

[@telejonjensen]

Glad to hear that

[@rogerlayton4316]

Best introduction to REST API security I have found. Simple and effective. Well done.

[@telejonjensen]

Hi Roger, Thanks and thanks for watching! Jon

[@jaskiratsingh8426]

oh man, this is the first video through which i actually understood the concept , simple yet effective .

[@telejonjensen]

Hi Jaskirat, I'm glad it helped. Thanks for watching! Jon

[@ravindranraghu]

You were the first person that made me understand , thanks a ton

[@PiyushSingh-mt2tb]

You're beard is so big, I could actually hear it! Thanks a lot for the video!

[@ahmadmeithaluny2551]

Thanks Jon you're best teacher .

[@thisfkinguy8426]

This is a great video and exactly what I was looking for! so many other resources have too much extra stuff, this boils it down to the basics and makes it easy to understand! thank you so much!

[@telejonjensen]

Hi Allan, My pleasure! Thanks for watching! Jon

[@flashteq1030]

Awesome and most simplified explanation

[@fkbase]

Very good, just what I needed, thank you.

[@Shazbot277]

Thanks this helped me out in 2021, simple and easy to use, included it in a MVC website.

[@telejonjensen]

Thanks for watching!

[@imperialdynamics5346]

Hi from Greece. Can someone explain to me why this excellent video also has downvotes?!. Easy-to-follow and short, what more could anyone ask for? THANK YOU.

[@ScottGammans]

Jon, these videos have been invaluable, coming from a traditional SOAP web services background like I do. Thank you!

[@telejonjensen]

Hi, Thanks for watching! I'm glad they are useful. Jon

[@derekemanuel1967]

Man I loved your video because you showed me how to pass in the token using Restlet Client!

[@telejonjensen]

Hi Derek, Great! Thanks for watching! Jon

[@alvinmacklee6303]

Very simple, effective and straight forward tutorial..

[@telejonjensen]

Hi Alvin, Thanks for watching! Jon

[@liviosolinas4064]

Many Thanks for your sharing, really very useful!

[@하현지-h8l]

This video is very helpful. many thanks.

[@xr280xr]

Good start, thanks! Next need to know how to issue and manage API tokens.

[@jamiedewitz6832]

I'd love to know the same. I'm trying to build a site that will use the API key to get a token back and utilize the token to consume multiple APIs. Any luck finding anything that helped?

[@AddictedSoulsMusic]

Such a cool video. Been looking for this on Udemy to no avail. Much appreciated sir! (from South Africa)

[@telejonjensen]

Hi, Thanks for watching! Jon

[@ashiqrifai]

you are awsome! every step to the point! Great !

[@marty501]

Very well explained! Thank you.

[@telejonjensen]

Hi, You are welcome. Thanks! Jon

[@philipvandenheever2084]

Thanks, as always Jon. You mentioned doing a more advanced security overview (possibly using the Azure AD?). It would be extremely useful.

[@telejonjensen]

Hi Philip, I will prepare something around that and OAuth. Thanks for watching! Jon

[@prassecrets]

perfect and very simple. thanks mate.

[@rafaeljonathancamiloveraro4199]

Hi. For someone super dump like me. How I can do the last part from 13:57 on .NET 6.0? Shall I create a class Global.asax? Or shall I do it directly in Program.cs? Sorry for the noob question.

[@juandiminico435]

awesome video, thanks

[@Nikku_b]

Very Useful video, Thanks :)

[@telejonjensen]

Hi, Thanks for watching! Jon

[@romeljohnmonsanto9072]

This helps me, Thanks Jon!

[@vivek.tiwary]

Very well explained, Please make video on oauth 2 and oidc.

[@telejonjensen]

Hi Vivek, Will do - thanks for watching! Jon

[@mfiebs12]

Thanks! This was really helpful!

[@telejonjensen]

Hi Michael, Thanks for watching! Jon

[@MoctarAbeidi]

Great! Thank you for this video!

[@telejonjensen]

Hi Moctar, You are welcome, thanks for watching! Jon

[@georgyajaeeya1561]

Thank you for this Part, I wonder if you could post something about authorization filters

[@intcoder]

Great explanation!!.

[@telejonjensen]

Hi, Thanks for watching! Jon

[@basitnisar1045]

thanks SIr..... but 1 question can we decorate our method with [APIKey]???

[@charliexgun2063]

Can this go with swagger? how would the parameters be? Thanks

[@mushuagayev4388]

You very good Teacher. You may download your simple in git hub. and past link. It shall be very goodness for us. Thank You Jon.

[@khodanimulisha6465]

Great staff :)

[@hussamalshammari4705]

we are waiting more video on security :)

[@bosszagame]

Thanks, You can use APIKey on URL ,example localhost/testAPI/api/member&APIKey=1234 ? without DCH rest client

[@dipeshnewyug7583]

Video is awesome , I tried it done but how i can pass the header from my jS . Itested my work in postman its done but how can i get it done from javascript call api using APIkey

[@telejonjensen]

Hi Dipesh, I'll work up some examples of calling the REST service directly using JavaScript. Thanks for the question! Jon

[@acostajuanguillermo]

Nice video Mr Jensen, very helpful. How do you get to run Windows so smoothly on OSx?

[@telejonjensen]

Hi Juan, I am using Parallels. Thanks for watching! Jon

[@shellphil5439]

Great! Just what I wanted. Could you make a video how we can make this more advance? :D

[@t.m.1593]

Where does the WebApiConfig come from?

[@telejonjensen]

Hi, When you create and ASP.Net WebAPI Application that should be there. Thanks for watching. Jon

[@kamel7897]

I'm working with .Net core APi and i can't finf Global.asax

[@telejonjensen]

Hi Youssef, Core doesn't have a global.asax. What are you trying to do that you would need that? If I understand that I should be able to help. I do have a few ASP.Net Core 2.0 videos out here: kzbin.info?o=U&video_id=7WjwseHTZsI Thanks for watching! Jon

[@kamel7897]

i'm working on a web api .net core and i want to add an apikey like you did. thank you!

[@kamel7897]

how can i convert : GlobalConfiguration.Configuration.MessageHandlers.Add(new APIKeyMessageHandler()); from Global.Asax to Startup.cs

[@kamel7897]

i used : config.MessageHandlers.Add(new APIKeyMessageHandlers()); But still no working !

[@telejonjensen]

Hi Youssef, I've got a solution for this. I'll be posting a video in the next few days. You need to configure middleware to handle this which is how .Net Core handles what was WebAPI Message Handlers and Modules. Jon

[@kaveenmadusanka8461]

Thank you

[@telejonjensen]

You're welcome

[@hemaabuhamza3695]

Thhhhhhhhanks alot

[@khan1593]

Error 1 'NPRWS.MessageHandlers.APIkeyMessageHandler.SendAsync(System.Net.Http.HttpRequestMessage, System.Threading.CancellationToken)': return type must be 'System.Threading.Tasks.Task' to match overridden member I'm getting this :(

[@wernhsp772]

Is this possible in VB.Net code?

[@telejonjensen]

Hi, Yes this can all be done in VB.Net. Jon

[@CAPS_AMERICA]

Your tutorial is awesome,. MICROSOFT SUCKS for implementing so many confusing ways to implement authentication/authorization by introducing thousands of confusing classes that then become obsolete for each new release of .net framework! You implement an authentication, then it won't work with a new version of framework or you have to change the code to replace deprecated classes! Microsoft, I hope your company gets bankrupt!!!!! Whoever is in charge of these so many confusing releases of core and framework should be fed to the Nile crocodiles in Africa!