Pro ASP.NET Web API Security: Securing ASP.MET Web API (Paperback) - Common

by Badrinarayanan Lakshmiraghavan

Excellent Book

Genres: Software

388 pages, Paperback

First published February 27, 2013

Reviews

[Tomasz Jaskula · Rating 4 out of 5]

I was looking more information about OpenId connect but the book is quite old and OpenId connect at the time of writing was not defined well enough so the book contains just a side note. However, I've learnt many useful information about security, differences between barear and holder of key tokens, SAMLs, JWT, SWT tokens, different security scenarios. The language is really simple to understand even if the author walks you through some complicated scenarios. Good read.

[Tom Schulte · Rating 4 out of 5]

This is a good, broad, fairly complete reference. I came to this reference for the OAuth material. The language for all the code written in this book is C#, which is what I was looking for. "Chapter 15: Security Vulnerabilities" with its explicit examples of CSRF, XSS is especially illustrative.