Web API security should be a priority right from the beginning. Even though the business needs it or not, the developer should focus on providing the right kind of security to the web API in the form of SSL and CORS, and the authentication using a token.
Authorization also plays an important role in API usage, as application users may have different levels of credentials; we looked into this with a claims-based authorization. ASP.NET Core security can be extended with Identity management using Identity Server 4, OpenId Connect mechanism, and so on.
In the next chapter, we will learn about integration with database using popular ORMs in the market.
