Monthly Archives: March 2021

Getting started with Self Sovereign Identity SSI

March 29, 2021 · by · in blockchain, Security, Self Sovereign Identity · 8 Comments

The blog is my getting started with Self Sovereign identity. I plan to explore developing solutions using Self Sovereign Identities, the different services and evaluate some of the user cases in the next couple of blogs. Some of the definitions are explained, but mainly it is a list of resources, links for getting started. I’m […]

Setting dynamic Metadata for Blazor Web assembly

March 23, 2021 · by · in .NET, ASP.NET Core, ASPNET5 · 3 Comments

This post shows how HTML header meta data can be dynamically updated or changed for a Blazor Web assembly application routes hosted in ASP.NET Core. This can be usually for changing how URL link previews are displayed when sharing links. Code: https://github.com/damienbod/BlazorMetaData Updating the HTTP Header data to match the URL route used in the […]

The authentication pyramid

March 17, 2021 · by · in Security · 6 Comments

This article looks at the authentication pyramid for signing into different applications. I only compare flows which have user interaction and only compare the 2FA, MFA differences. A lot of incorrect and aggressive marketing from large companies are blurring out the differences so that they can sell their products and so on. When you as […]

Securing Blazor Web assembly using cookies

March 8, 2021 · by · in .NET Core, ASP.NET Core, Azure, MVC, OAuth2, Security, Web · 8 Comments

The article shows how a Blazor web assembly UI hosted in an ASP.NET Core application can be secured using cookies. Azure AD is used as the identity provider and the Microsoft.Identity.Web Nuget package is used to secure the trusted server rendered application. The API calls are protected using the secure cookie and anti-forgery tokens to […]

Using Azure AD groups authorization in ASP.NET Core for an Azure Blob Storage

March 1, 2021 · by · in .NET, .NET Core, ASP.NET Core, Azure, OAuth2, Security · 2 Comments

This post show how Azure AD groups could be used to implement authorization for an Azure Blob storage and used in an ASP.NET Core Razor page application to authorize the identities. The groups are assigned the roles in the Azure Storage. Azure AD users are added to the Azure AD groups and inherit the group […]