What background knowledge is necessary to enroll in the course?

Learners should have a basic understanding of C# programming, familiarity with ASP.NET Core fundamentals, and some experience with relational databases. Knowledge of HTTP protocols, REST principles, and object-oriented programming concepts will help you get the most out of this course.

Who is this course for?

This course is designed for developers, software engineers, and backend programmers who want to build secure, robust, and maintainable web APIs using ASP.NET Core. It is also suitable for students or professionals looking to advance their skills in API development and security.

How long does it take to complete the course?

The course consists of 12 hours of video content, which can be completed at your own pace depending on how much hands-on practice you incorporate alongside the lessons.

Does the course cover advanced API architecture concepts?

Yes, the course includes sections on advanced architecture concepts such as project layout patterns, separating core, data, and application layers, and using the Options Pattern for configuration management, which help create scalable, maintainable, and well-organized API projects.

Can I preview a course before enrolling?

Yes, you can preview the first video and view the syllabus before you enroll. You must purchase the course to access content not included in the preview.

When will I have access to the lectures and assignments?

If you decide to enroll in the course before the session start date, you will have access to all of the lecture videos and readings for the course. You’ll be able to submit assignments once the session starts.

What will I get when I enroll?

Once you enroll and your session begins, you will have access to all videos and other resources, including reading items and the course discussion forum. You’ll be able to view and submit practice assessments, and complete required graded assignments to earn a grade and a Course Certificate.

When will I receive my Course Certificate?

If you complete the course successfully, your electronic Course Certificate will be added to your Accomplishments page - from there, you can print your Course Certificate or add it to your LinkedIn profile.

Why can’t I audit this course?

This course is currently available only to learners who have paid or received financial aid, when available.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

Building and Securing Web APIs with ASP.NET Core

Labor Day starts with $70+ in savings on Coursera Plus. Save 40% for 3 months.

Building and Securing Web APIs with ASP.NET Core

This course is part of The Definitive ASP.NET Core Web API Guide Specialization

Instructor: Packt - Course Instructors

Included with Learn more

Ask Coursera

7 modules

Gain insight into a topic and learn the fundamentals.

Intermediate level

Recommended experience

1 week to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

7 modules

Gain insight into a topic and learn the fundamentals.

Intermediate level

Recommended experience

1 week to complete

at 10 hours a week

Flexible schedule

Learn at your own pace

What you'll learn

Scaffold database-driven API endpoints efficiently and apply best practices in controller design.
Implement DTOs to manage data shaping, validation, and secure responses in APIs.
Apply advanced authentication, JWT, API keys, and role-based authorization in ASP.NET Core.
Design scalable and maintainable service layers with dependency injection and AutoMapper.

Details to know

Shareable certificate

Add to your LinkedIn profile

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the The Definitive ASP.NET Core Web API Guide Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 7 modules in this course

This course features Coursera Coach!

A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This course is designed to help developers master the creation and protection of Web APIs using ASP.NET Core. You’ll gain hands-on experience with scaffolding, data validation, DTO implementation, and API security, building confidence to design scalable and secure backend systems. By combining theory with practical coding exercises, you’ll develop a strong foundation in API development best practices. The course begins with scaffolding database-driven API endpoints for countries and hotels, guiding you through controller generation, testing, and refactoring for optimal performance. You will then learn to implement DTOs for data shaping, validation, and security, improving your API’s reliability and structure while reducing potential vulnerabilities. Next, you’ll dive into implementing a service layer, exploring dependency injection, AutoMapper, and the Results Pattern to organize business logic and standardize responses. Advanced security topics follow, covering authentication mechanisms, JWT, API keys, roles, and authorization policies, ensuring your APIs are protected against common threats. You will also implement hotel booking functionality, integrating RESTful principles, user and admin booking management, advanced validation, and thorough testing. Finally, the course explores advanced architecture concepts, including project layout patterns, separate core, data, and application layers, and the Options Pattern, equipping you to build maintainable and scalable APIs. By the end of the course, you will be able to scaffold and secure database-driven API endpoints, implement DTOs for data validation and shaping, design a robust service layer with dependency injection and AutoMapper, apply multiple authentication schemes and authorization policies, and structure a scalable API architecture following best practices in ASP.NET Core.

In this module, we will introduce scaffolding in ASP.NET Core and demonstrate how it accelerates API development. You will scaffold controllers for countries data, review the generated code, and refine it for efficiency. The module concludes with hands-on testing to ensure your endpoints work flawlessly.

What's included

7 videos2 readings1 assignment

7 videosTotal 39 minutes

Section Overview1 minute
Introducing Scaffolding3 minutes
Scaffold Countries API Controller4 minutes
Review Countries Controller12 minutes
Testing Countries API Endpoints10 minutes
Refactoring Scaffolded Controller Code7 minutes
Section Review2 minutes

2 readingsTotal 20 minutes

Introduction to the Course 'Building and Securing Web APIs with ASP.NET Core'10 minutes
Full Specialization Resource10 minutes

1 assignmentTotal 15 minutes

Scaffolding Database-Driven API Endpoints (Countries) - Assessment15 minutes

In this module, we will scaffold API endpoints for hotel data and explore how related database data affects API design. You will implement, test, and refine endpoints to handle complex relationships efficiently. By the end, your hotel APIs will be both functional and optimized for real-world use.

What's included

7 videos1 assignment

7 videosTotal 32 minutes

Section Overview1 minute
Scaffold and Test Hotels API Controller8 minutes
Understanding Related Data4 minutes
Improve GET Endpoint to Fetch Related Data – Part 14 minutes
Fix: JSON Object Cycle Error4 minutes
Improve GET Endpoint to Fetch Related Data – Part 28 minutes
Section Review3 minutes

1 assignmentTotal 15 minutes

Scaffolding Database-Driven API Endpoints (Hotels) - Assessment15 minutes

In this module, we will explore DTOs and their importance in shaping, validating, and securing API data. You will implement DTOs across country and hotel endpoints and refactor controllers for clean, maintainable responses. The focus is on improving data integrity and controlling what your API exposes.

What's included

9 videos1 assignment

9 videosTotal 57 minutes

Section Overview1 minute
The Importance of Validation6 minutes
Explore and Implement Validation Rules9 minutes
Understanding DTOs and Data Shaping5 minutes
Adding DTOs for Data Validation and Data Shaping8 minutes
Adding DTOs for Country Data Validation and Data Shaping2 minutes
Refactor Hotels Controller to Use DTOs16 minutes
Refactor Country Controllers to Use DTOs9 minutes
Section Review2 minutes

1 assignmentTotal 15 minutes

Implementing DTOs for Data Shaping, Validation, and Security - Assessment15 minutes

In this module, we will introduce the service layer and its benefits for organizing API business logic. You will learn Dependency Injection, implement AutoMapper, and apply the Results Pattern to standardize responses. The module concludes with testing and optimization to ensure a robust, scalable API architecture.

What's included

14 videos1 assignment

14 videosTotal 100 minutes

Section Overview1 minute
What Is a Service Layer?6 minutes
Adding the Service Layer – Part 111 minutes
Understanding Dependency Injection5 minutes
Using Dependency Injection9 minutes
Adding the Service Layer – Part 213 minutes
Introducing AutoMapper8 minutes
Implementing AutoMapper7 minutes
Introducing the Results Pattern7 minutes
Implementing Results Pattern11 minutes
Refactor Controller to Use Results7 minutes
Refinements and Optimizations8 minutes
Test and Verify Application and Changes5 minutes
Section Review3 minutes

1 assignmentTotal 15 minutes

Implementing a Service Layer - Assessment15 minutes

In this module, we will focus on securing your ASP.NET Core API using various authentication and authorization techniques. You will implement Identity, JWT, API keys, and role-based controls. Comprehensive testing ensures your endpoints are protected and compliant with best security practices.

What's included

25 videos1 assignment

25 videosTotal 159 minutes

Section Overview1 minute
Introduction to Authentication & Authorization2 minutes
Types of API Authentication Mechanisms3 minutes
Setting Up Identity in ASP.NET Core API10 minutes
Customizing Identity Tables5 minutes
Add Default Identity Endpoints9 minutes
Add Custom Authentication Endpoints13 minutes
Add User Service and Refactor Endpoints10 minutes
Basic Authentication3 minutes
Implementing Basic Authentication12 minutes
Testing Basic Authentication6 minutes
API Key Authentication4 minutes
Implementing API Key Authentication8 minutes
API Key Testing and Improvements8 minutes
JWT Authentication4 minutes
Implement JWT Auth Parameters7 minutes
Implement JWT Auth Scheme6 minutes
Understanding Claims4 minutes
Implement JWT Issuing14 minutes
Testing JWT Auth5 minutes
Understanding Roles2 minutes
Seeding Default Roles and Assigning to Users11 minutes
Testing Role-Protected Endpoints5 minutes
Supporting Multiple Authentication Schemes7 minutes
Section Review2 minutes

1 assignmentTotal 15 minutes

Implementing API Security - Assessment15 minutes

In this module, we will develop a full-featured hotel booking system within your API. You will build endpoints, implement business logic, secure access, and validate data. Thorough testing ensures a reliable booking experience for both users and administrators.

What's included

16 videos1 assignment

16 videosTotal 126 minutes

Section Overview1 minute
Feature Requirements3 minutes
Creating New Data Models9 minutes
Adding Configurations and Migrations9 minutes
Understanding RESTful Design: Resource Hierarchy & Context5 minutes
Implementing Create Booking Endpoints6 minutes
Implementing Booking Management Business Logic – Part 112 minutes
Implementing Booking Management Business Logic – Part 27 minutes
Implementing User Booking Management Endpoints and Business Logic11 minutes
Implementing Hotel Admin Booking Management Endpoints and Business Logic7 minutes
Implementing Authorization Policies9 minutes
Advanced Authentication Filters14 minutes
Advanced Validation5 minutes
Refactoring and Code Cleanup11 minutes
Thorough Testing and Validation16 minutes
Section Review1 minute

1 assignmentTotal 15 minutes

Hotel Bookings - Assessment15 minutes

In this module, we will explore advanced architectural patterns for ASP.NET Core APIs. You will learn to structure core, data, and application layers, manage configurations, and enhance maintainability. The module concludes with testing to verify that your architecture supports robust, scalable applications.

What's included

8 videos1 reading3 assignments

8 videosTotal 48 minutes

Section Overview1 minute
Understanding Project Layout Patterns4 minutes
Separate Core or Common Layer11 minutes
Adding the Options Pattern7 minutes
Separate Data Layer8 minutes
Separate Application Layer8 minutes
Test and Validate Functionality6 minutes
Section Review2 minutes

1 readingTotal 10 minutes

Conclusion to the Course 'Building and Securing Web APIs with ASP.NET Core'10 minutes

3 assignmentsTotal 90 minutes

Full Course Practice Assessment15 minutes
Advanced Architecture Concepts - Assessment15 minutes
Full Course Assessment60 minutes

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Packt - Course Instructors

Packt

2,145 Courses655,267 learners

Offered by

Packt

Explore more from Mobile and Web Development

Packt
Optimizing and Deploying ASP.NET Core Web APIs
Course
Packt
Introduction to ASP.NET Core Web API
Course

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Break down barriers to learning with big savings
Get Coursera Plus
Start with easy savings for hard-working teams
Save 30% today

Frequently asked questions

Building and securing web APIs with ASP.NET Core involves creating application programming interfaces that allow different software systems to communicate securely and efficiently. It is relevant because modern web and mobile applications rely heavily on APIs, and ensuring these APIs are both functional and secure is essential for protecting user data and enabling reliable services.

This course guides learners through developing API endpoints using ASP.NET Core, covering database-driven scaffolding, implementing DTOs for data shaping and validation, creating a service layer, and applying robust security measures including authentication and authorization. It also covers practical features like hotel booking management and advanced architectural patterns to ensure scalable, maintainable APIs.

After completing this course, you will be able to scaffold and implement API endpoints, enforce data validation and shaping with DTOs, separate business logic using a service layer, secure APIs with multiple authentication schemes including JWT and API keys, manage user roles and permissions, and design scalable API architectures suitable for real-world applications.

You will learn to implement multiple authentication mechanisms including Basic Authentication, API Key Authentication, and JWT-based authentication, as well as role-based authorization to control access to different API endpoints. These security techniques ensure that your APIs are protected against unauthorized access and data breaches.