security
ASP.NET Core and .NET Security Articles, Tutorials & News
ASP.NET Core and .NET Security articles, tutorials, and news from the DotNetNews archive.
520 articles Updated Page 3 of 21
Browse additional ASP.NET Core and .NET Security articles from the DotNetNews archive.
ASP.NET Core and .NET Security articles
Page 3 of 21
Newest first
-
Detecting .NET Security Regressions Before Production Deployment
C# Corner Issue #522
Create a CI/CD security regression gate for .NET applications that validates runtime and framework updates before deployment and detects security issues early.
-
Auditing AI-Generated C# for Unsafe Code Contracts
C# Corner Issue #522
Audit AI-generated C# unsafe code. C# 15's new model clarifies safety contracts, making review critical for pointer, stackalloc, and interop code.
-
REST API Security Best Practices in ASP.NET Core
Medium Issue #521
It does not matter how clean your architecture is or how fast your queries run — if an attacker can read another user’s orders or forge a… Continue reading on CodeX »
-
Securing ZIP-Based .NET Applications with Password-Protected Archives
C# Corner Issue #521
Explore password-protected ZIP archives in .NET and learn how to securely package, transfer, and protect application data using the latest ZIP security capabilities.
-
Your .NET API Works. But Is It Actually Production-Ready?
Medium Issue #521
A practical guide to taking an ASP.NET Core API from “it works on my machine” to something you can confidently deploy.
-
Building Secure and Scalable Multi-Tenant SaaS Applications with .NET and Angular
C# Corner Issue #520
Learn how to build secure and scalable multi-tenant SaaS applications with .NET and Angular, covering tenant isolation, database architecture, authentication, scalability, monitoring, and DevOps.
-
Modern authentication in ASP.NET Core with 2FA and passkey
elmah.io Blog - .NET Technical tutorials/guides and new features Issue #519
This walkthrough builds a .NET 10 ASP.NET Core Web API (TwoFaNET10) implementing two-factor authentication and WebAuthn/FIDO2 passkey login, using Microsoft.AspNetCore.Identity.EntityFrameworkCore wit...
-
Implementing JWT Authentication with Secure Refresh Tokens in .NET Core
C# Corner Issue #519
Implement secure JWT authentication with refresh tokens in .NET Core. Learn to generate, validate, and refresh tokens for stateless API security.
-
Automated Governance and Dynamic Routing in Enterprise LangGraph RAG
C# Corner Issue #519
Automate RAG tool registration and enforce Pydantic schemas in enterprise LangGraph with Python metaclasses for scalable, secure multi-agent AI.
-
Building Distributed Rate Limiting with Redis and YARP Reverse Proxy
C# Corner Issue #518
Learn to build robust distributed rate limiting for ASP.NET Core apps using Redis and YARP. Protect APIs from traffic spikes and abuse.
-
JWT Session 15: Implement Logout and Refresh Token Revocation in ASP.NET Core Web API
C# Corner Issue #518
Secure your JWT-based ASP.NET Core API by implementing robust logout and refresh token revocation to prevent session hijacking and unauthorized access.
-
Building a Production-Ready Image Analysis API with ASP.NET Core
C# Corner Issue #517
Learn how to build a secure asynchronous image analysis API with ASP.NET Core, background workers, task tracking, file validation, and pluggable vision providers.
-
Teach Claude Your Auth Rules - Stop Reviewing AI Code for Missing [Authorize] Attributes
C# Corner Issue #517
Teach Claude Code your auth rules via CLAUDE.md to prevent security gaps in AI-generated code. Streamline reviews & ensure consistency.
-
Dual-Layer Rate Limiting Middleware for Enterprise LangGraph RAG
C# Corner Issue #517
Secure enterprise LangGraph RAG with dual-layer rate limiting (IP & API Key) in FastAPI, preventing abuse and controlling costs.
-
Implementing Multi-Tenant SaaS Architecture in ASP.NET Core
C# Corner Issue #517
Implement secure and scalable multi-tenant SaaS in ASP.NET Core. Learn tenancy models, data isolation, and best practices for shared or separate databases.
-
Integrating Snowflake Cortex AI with Enterprise .NET Applications
C# Corner Issue #517
Integrate Snowflake Cortex AI with .NET apps for secure, in-perimeter LLM inference. Leverage JWTs & native RBAC for data governance.
-
Building MCP Servers with ASP.NET Core for Enterprise AI Agents
C# Corner Issue #517
Build AI-ready enterprise agents with ASP.NET Core and MCP. Standardize tool discovery, reduce integration complexity, and enhance security.
-
Soft-delete vs the right to erasure: the GDPR conflict and the erasure pathway
Medium Issue #517
Soft-delete is the right default for lifecycle and audit.
-
Content Security Policy in ASP.NET Core
C# Corner Issue #516
Learn how to implement Content Security Policy (CSP) in ASP.NET Core to prevent XSS attacks by controlling resource loading.
-
Common Mistakes in Manual SQL Database Recovery - Know What Not To Do
C# Corner Issue #516
Avoid common SQL database recovery mistakes. Learn best practices for manual recovery, when to use specialized tools, and prevent data loss.
-
Azure Key Vault Integration in .NET: Configuration Binding vs. SecretClient
C# Corner Issue #515
Securely integrate Azure Key Vault in .NET using Configuration Binding or SecretClient. Choose the best approach for your app's needs.
-
Automatic CSRF protection based on Fetch Metadata headers
Andrew Lock | .NET Escapades Issue #515
In this post I describe the new Cross-Site Request Forgery protection added to ASP.NET Core that uses Fetch Metadata HTTP headers instead of antiforgery tokens
-
Understanding the Role of Microsoft Entra ID in Microsoft Intune
C# Corner Issue #515
Discover how Microsoft Entra ID powers Intune for secure device management, user authentication, and policy enforcement for your organization.
-
Generate Secure and Configurable Passwords in .NET with PasswordPolicy
Medium Issue #514
A lightweight .NET library for cryptographically secure password generation, custom password policies, validation, entropy checks, and…
-
Building Production-Ready Rate Limiting in ASP.NET Core 10
C# Corner Issue #513
Master ASP.NET Core 10 rate limiting for production. Learn strategies, policies, and best practices to protect your APIs from abuse and traffic spikes.