Tag Archives: device

Is scanning QR Codes for authentication safe?

October 17, 2022 · by · in OAuth2, Security, Self Sovereign Identity · 5 Comments

This article explains why cross device authentication has security issues as it is subject to phishing attacks unless further authentication is used in the client. Scanning QR Codes for authentication does not protect against phishing and leaves the users open to having their session stolen. Phishing There a many forms of phishing and this is […]

Implement OAUTH Device Code Flow with Azure AD and ASP.NET Core

January 28, 2021 · by · in .NET, ASP.NET Core, Azure, MVC, OAuth2, Security, Web · 2 Comments

The post shows how the Device Code flow (RFC 8628) could be implemented in an ASP.NET Core web application which uses Azure AD as an identity provider. An Azure App registration is used to setup the client. This solution would be useful for input constrained devices which have a browser and need to authenticate identities. […]

Provisioning X.509 Devices for Azure IoT Hub using .NET Core

February 20, 2020 · by · in .NET, .NET Core, ASP.NET Core, Azure, dotnet · 3 Comments

This article shows how Azure device provisioning service can be used to setup an Azure IoT Hub and provision devices using X.509 certificates in an enrollment group. The certificates are created using the Nuget package CertificateManager. By using this package, the X.509 certificates can be created in .NET Core and created on the fly as […]