As announced by Microsoft recently, we can use IntelliSense with appsettings.json files. What are appsettings.json files? Common settings of the application are generally stored in appsetting.json files. These files are separated on the basis of environments. For example, the settings for production environment are stored in appsettings.production.json and the settings for acceptance environment are stored … Continue reading appsettings.json gets IntelliSense
https://fbinfer.com/ You might have heard about Infer which is a tool to detect bugs in Java and C/C++/Objective-C code before it ships. Infer belongs to Facebook and it is a static analysis tool to produce a list of potential bugs such as null pointer exceptions, resource leaks, annotation reachability, missing lock guards, and concurrency race conditions … Continue reading First look at InferSharp: A C# version of Facebook’s Infer
This post is different than regular technical posts but at this situation we should help each other by spreading the technology which may help us. I came across a post on Twitter by which I got to know about a watsapp alert service powered by World health organization: I tried it out by following this … Continue reading Whatsapp alert service by World Health Organization(WHO) for COVID-19(Corona virus)
source: Medium In this article, we will see how we can skip Identity server 4 login page if we have integrated Azure AD with identity server 4. First let me explain the problem and then I will explain the solution for the same. Problem: We use Identity server 4 for authentication and we have integrated … Continue reading Skip Identity server login page for Azure AD(Auto login)
This article shows how to create certificates for an IdentityServer4 application to use for signing and token validation. The certificates are created using the CertificateManager nuget package. Both RSA and ECDsa certificates can be used for signing in IdentityServer4.
Creating the Certificates in .NET Core
A simple .NET Core console application is used to create the certificates. This type of application can run on most of the standard operating systems. Create a new console application and add the package CertificateManager. The package Microsoft.Extensions.DependencyInjection is also required to initialize the package.
Creating a RSA certificate
A self signed RSA certificate can be created using the CertificateManager NewRsaSelfSignedCertificate method. The key size must be at least 2048. The following example also adds TLS server and client authentication OID extensions, so that the certificate could also be used for client authentication.
View original post 172 more words
You can use Fallback Policies in ASP.NET Core 3.0+ to require an Authenticated User by default. Conceptually, you can think of this as adding an
[Authorize] attribute by default to every single Controller and Razor Page ONLY WHEN no other attribute is specified on a Controller or Razor Page (like
[Authorize(PolicyName="PolicyName")]). See lines 9-11 below.
|// Other Startup code omitted|
|// Register other policies here|
|// Other service registrations omitted|
A Quick Lap Around the [Authorize] and [AllowAnonymous] Attributes
In ASP.NET Core (and even previously in ASP.NET), we’ve had the ability to add a
[Authorize] attribute to a resource (such as a Controller or Razor Page)…
View original post 1,025 more words
Nice article from Damien.
This article shows how MFA could be forced on users to access sensitive pages within an ASP.NET Core Identity application. This could be useful for applications where different levels of access exist for the different identities. For example, users might be able to view the profile data using a password login, but an administrator would be required to use MFA to access the admin pages.
Blogs in this series
- Force ASP.NET Core OpenID Connect client to require MFA
- Send MFA signin requirement to OpenID Connect server using ASP.NET Core Identity and IdentityServer4
- Requiring MFA for Admin Pages in an ASP.NET Core Identity application
Extending the Login with a MFA claim
The application is setup using ASP.NET Core with Identity and Razor Pages. In this demo, the SQL Server was replaced with SQLite, and the nuget packages were updated. The AddIdentity method is used instead of AddDefaultIdentity one, so…
View original post 344 more words
In my previous post I added links to get the archived presentations and sessions for .Net Conf 2019 which you can find here. In this quick post we will see what is long term .Net release schedule and what is the near future of .Net. .Net Core 3.0 .Net Core 3.0 is current major release … Continue reading .Net 5.0 : The future of .Net
You might have followed .Net Conf which is one of the biggest conferences for Microsoft technology stacks. I wrote a small post for .Net Conf before few days which you can find here. Even though you might have followed some sessions from .Net Conf, it is very tough to catch all the sessions as they … Continue reading Archive for .Net Conf 2019 presentations and sessions
Very nice article: Adding external authentication with a Microsoft account
Today, we are going to add external authentication to our website, enabling us to restrict some features to logged in users. As we don’t want to manage users and passwords ourselves, we will utilize other authentication services, such as Microsoft Live/Account, Google, Twitter, and Facebook. Today, we will setup the infrastructure and connect to the Microsoft account, and then next week, show how to connect to Google, Twitter and Facebook too.
Upgrading to .Net Core 2.2
Before we start to add the authentication code, we are quickly going to upgrade to .Net Core 2.2, from 2.1. This was surprisingly easy for us – perhaps because of our automated testing. We didn’t have to update any code, except for the compatibility line in startup.cs in our web service and web site. This also gave us an opportunity to upgrade all of the NuGet packages to their latest versions. The automated tests…
View original post 1,132 more words