TalkPython - Secure APIs with FastAPI and the Microsoft Identity Platform Course

Azure Active Directory (Azure AD) is a cloud-based Identity and Access Management service from Microsoft. With security threats on the rise it's important to know how to build secure solutions with robust authentication and authorization services to protect your data. In this course we will introduce basic identity principals and learn how to use Azure AD to enforce who and how they can access our Fast APIs using open industry standards such as OAuth2 and OIDC.
If you are a Python developer that wants to know how to implement secure, JWT-based authentication and authorization by leveraging a scalable, secure and flexible identity provider such Azure AD, then this course is for you. You will learn how to secure your APIs without the need to write too much code or having intricate knowledge on how OAuth2 and OIDC work. A plug and play solution for every Python developer and solution architect out there.
Source code and course GitHub repository
github.com/talkpython/fastapi-and-the-microsoft-identity-platform-course
What's this course about and how is it different?
Identity and security are complex topics. Your solution is as secure as the weakest link in your code. Instead of spending weeks or even months building an identity solution for your application, it's highly recommended that you use a battle-tested Identity Provider such as Azure Active Directory. Azure AD handles billions of authentications daily and scales from 1 user to millions users without you having to think about performance, storage, backups, and availability.
This is the only course (that we're aware of) that shows you how to add authorization to your Fast API and implement strict checks on JWT Access Tokens to validate incoming requests. In this course, you'll learn how end-to-end scenarios work in real life scenarios by building clients that can securely authenticate and call our FastAPI-based application. Finally, you'll spend some time learning general identity principles and do a deep dive on why and how JWT-based authentication is more secure.
After completing this course, you'll have a robust understanding of how to build modern, secure solutions with Python, FastAPI, and Azure Active Directory.
Prerequisite course
While the code written in this course is simple and you only need basic fluency with Python, we do assume you know FastAPI. If you're entirely new to FastAPI, please consider taking our Modern APIs with FastAPI and Python to become comfortable with FastAPI first.
What topics are covered?
In this course, you will
Learn what Identity is and why modern solutions need to know who we are and what we can do.
Understand modern authentication and why we needed open standards such OAuth2 and OpenID Connect (OIDC).
Learn how to create and work with Microsoft Azure Active Directory.
Take a look at the microsoft_identity_fastapi package built specifically to perform authorization and token validation in FastAPI-based solutions.
Dive deep into JWT-based authentication and better understand tokens and claims.
And lots more.
View the full course outline.
Who is this course for?
This course is for anyone who creates APIs with the FastAPI framework in Python and needs to add the necessary security to protect access to sensitive resources and data but doesn't want to (and shouldn't have to) build and maintain their own identity service. A key benefit of this approach is that you need to do very little to implement authentication and authorization in FastAPI - it's literally a few lines of code and some configuration and you're ready to go.
The experience level for anyone taking this course is very light high. You'll need
A basic understanding of how Fast API works.
Experience with core Python concepts (such as classes, functions, variables etc).
Knowledge of API clients such as Postman etc.
Note: All software used during this course, including editors, the Azure AD service, Python language, etc., are 100% FREE. You won't have to buy anything to take the course.
Homepage

https://training.talkpython.fm/courses/secure-apis-with-fastapi-and-the-microsoft-identity-platform