Collaborate Disseminate
I am really trying to get the big picture of the Authentication and Identity modules in ASP.NET Core 2: not just how to use them (which I can and which I do) but really what exactly are the different parts in the implementati… Continue reading Concepts in Authentication and Identity modules in ASP.NET Core 2
I wanted to copy from a local publish location of my ASP.NET Core project on a production IIS Server, and Windows Defender detected a Trojan in my main executable file. When I scan this folder on my local machine, Defender do… Continue reading My ASP.NET core application executable detected as Trojan
We are remediating this vulnerability and would like to know if anyone has been succesfful mitigating this?
Related to Nessus plugins: 111070, 111071
Package: Microsoft.AspNetCore.Server.Kestrel.Core
Package: Microsoft.AspN… Continue reading Remediation of Security Updates for Microsoft .NET core and ASP.NET (DoS) (July 2018)
This question already has an answer here:
Why do we still use the terms SSL and HTTPS? [closed]
3 answers
I am developing… Continue reading Why is TLS still commonly referred to as SSL? [duplicate]
Hopefully this isn’t a complete duplicate. I’ve been reading articles and just can’t fully wrap my head around this. Many articles seem to having differing opinions.
I’m building a web app (Spa + backend Web Api). There i… Continue reading Asp.Net Web API correct usage of WS Federation for Web Application
Hopefully this isn’t a complete duplicate. I’ve been reading articles and just can’t fully wrap my head around this. Many articles seem to having differing opinions.
I’m building a web app (Spa + backend Web Api). There i… Continue reading Asp.Net Web API correct usage of WS Federation for Web Application
I’m developing a web application which manages security and hygiene at work so the clients can access information about medical stuff, like exams, reports, accidents, ability to work, things like that.
Info like this is rath… Continue reading JWT for authentication and authorization and protecting an API. It’s feasible / secure?
I’m new to ASP.NET Core and OpenID connect/AzureAD, so I’m looking for some validation (or otherwise) of my approach. Extensive reading/googling over the last couple of weeks while I’ve been learning this hasn’t turned up an … Continue reading Web application making a call to a REST API when already authenticated
I am going to frame this question using ASP.NET Core in mind since that is what I’m using, though my question is applicable to any scenario in which you have a client that makes requests to a server storing static files.
I am implementing ASP.NET Core Identity with IdentityServer4. One feature is password reset, and I found that all the examples (e.g. the IdentityServer4 quick start and the ASP.NET Identity example) tend to do this:
The Pas… Continue reading Requiring e-mail from user when using ASP.NET Identity password reset features