Category Security
Authorization Policies and Data Protection with IdentityServer4 in ASP.NET Core
This article shows how authorization policies can be used together with IdentityServer4. The policies are configured on the resource server and the ASP.NET Core IdentityServer4 configures the user claims to match these. The resource server is also setup to encrypt a ‘Description’ field in the SQLite database, so it cannot be read by opening the […]
OAuth2 Implicit Flow with AngularJS and ASP.NET Core 2.0 IdentityServer4
This article shows how to implement the OAuth2 Implicit Flow with an AngularJS client and IdentityServer4 hosted in ASP.NET Core 1.1. The code was built using the IdentityServer4.Samples. Thanks to everyone who helped in creating IdentityServer. Code: https://github.com/damienbod/AspNet5IdentityServerAngularImplicitFlow History: 2017-08-15: Updated ASP.NET Core 2.0, Angular 4.3.6 Full history: https://github.com/damienbod/AspNet5IdentityServerAngularImplicitFlow#history Other posts in this series: OAuth2 […]
Web API GitHub OAuth2 Code Flow
This article demonstrates how to setup an OAuth2 code flow example using GitHub as an authorization server and a Web API service as a resource server. Thanks to Jerrie Pelser and Thinktecture for providing code and blogs which made it easy to research this and setup a working example. Code: https://github.com/damienbod/WebAppGitHubCodeFlow Setting up GitHub OAuth2 […]
Web API 2 Excel File Export With OAuth2 Implicit Flow
This article demonstrates how to set up a Web API 2 excel file download using OAuth2 Implicit Flow. The application requires an Authorization Server and Identity Server V2 from Thinkteckture and also the excel Media Formatter from WebApiContrib. leastprivilege.com provided a lot of blogs which helped complete this article. Thanks for those blogs. The article […]
IIS HTTPS configuration for Team development
This post a collection of information which I found all over the internet. I’m posting it as a reference for myself. I need to set up a development environment where a team of developers can develop multiple projects which use and test Web applications using HTTPS. Step 1: Create a root cert. This will be […]
Software Engineering 