security by obscurity?
Hi all, This is maybe more of an ethical security question. but its IIS related..I've been asked to put an existing internal (web forms) aspx application securely on to the internet.I am re-writing...
View ArticleASP.Net Newbie Questions on Identity
tldr: when does the database actually get queried for functions like register user and login?Hi,I'm new to web development but somewhat familiar with object oriented programming and sql databases. I...
View ArticleAdd SSL for web application without domain registered
I have a .NET winform application that connects to a remote database on a VPS (windows 2016 server), the connection is made through OpenVpn because it was necessary for certain functions to be used on...
View ArticleLogic behind UserManager.Get{Property}Async methods
When looking through scaffolded Identity code, I see things like this pretty frequently:var user = await _userManager.GetUserAsync(User); // gets user from ClaimsPrincipal // ... later on... var email...
View ArticleSecure files upload in ASP.NET Core
Hello. I was going through MS docs (link below) on file uploading and got interested in these 2 recommendations. Upload files in ASP.NET Core | Microsoft Docs1. The app's process must have read and...
View ArticleWhen decrypting a web.config section using aspnet_regiis will fail
I usually secure the connection string and any confidential data inside my web.config file using these commands:-aspnet_regiis -pe "customAppSettingsGroup/customAppSettings" -app "/" -prov...
View ArticleHow to fix authentication Failure (Remote Transport stream closed)
I'm getting the following error:Authentication failed because the remote party has closed the transport stream.here's my code: string assertion = CreateAuthToken(); HttpClient...
View ArticleAntiforgerytoken randomly not matching?
<div style="display: none;"></div><div style="display: none;"></div> <div style="display: none;"></div>I have a .NET MVC Core app with form submission that is...
View ArticleDifferences in validating Certificate
I'm a novice at coding for certificates, but learning quickly.I installed a certificate to the current user, and wrote C# code in Visual Studio 2019. Everything runs great.However, when I run Visual...
View ArticleProblems with Identity
Hi,I am using the page ResetPassword out of the box from the Identity scaffolding.When I call the page it correctly copies the code to the class "InputModel" but after the user fills out the form, it...
View ArticleHow to disable subresouce integrity in a js file for newly added javascript...
In asp.net webform page, below script element includeddevelopment server is enabled for subresouce integrity. I have added a new javascript function at pagevalidations.js. during the runtime, the...
View ArticleAspNetRoleClaim dont have Guid Id
I am using identity when i do migration the table AspNetRoleClaim and AspNetUserClaim do not have Id as Guid both tables have int rest of tables such as AspNetUsers and AspNetRoles have Id as...
View ArticleHow to make a postman request with https + basic authen and certificate ?
Hello,we have some url in our private networks who is in http.Of course after an audit, we need to pass these url in https.For to do that, we add in IIS the binding, also a certificate for httpsAlso we...
View Articlehow to preserve fragment url in asp.net
Hi Team,We are using Azure AD authentication using Open Id connect. We have use case where URL contains fragment url like "#BugAction:xxx" etc so if user hits first time it goes to Azure AD login and...
View ArticleAuthenticate Blazor WebAssembly using multiple identity providers
I am learning Blazor WebAssembly and building a small project to be hosted as Static Web App in Azure.The target framework is net5.0.When the user clicks over 'login' hyperlink or button, a new page...
View ArticleNet 5 Windows Authentication: Disable automatic login to avoid custom LDAP code
'm using VS2019. I've created a new "ASP.NET Core Web App (MVC)", with Target Framework ".NET 5.0 (Current)". I am running it on a machine which is already joined to the targed Active Directory...
View ArticleRemoving Everyone from Shared Folder
Hi, I've a shared folder (that stores attached documents to requests) on a server that had access for the Everyone group. The Shared file is populated by users submitting a request with attachments...
View Articlesomeone to tell me why I can't log in, please
byte[] passwordAndSalt =System.Text.Encoding.UTF8.GetBytes(Pass+Salt);before I post my entire where does the pass and salt variable comes from?code try { string usernameT =...
View ArticleHow to implement user activation
The requirements are simple, but none standard: Admin creates the user (email, full name, phone) and the user is emailed a link to set the username and password. I am struggling with implementing the...
View ArticleExternal Login functionality...
External login implementation worked fine for more than a year and all of a sudden it stopped working (without changing anything in that implementation)....
View Article
![[-100%] Commodity Intelligence – (Android Apps)](http://play-lh.googleusercontent.com/j67-qJvmnn4xnVlYVZ9ZhtZUJIgwjKekJGoKQT6D1KHcWGZxtQaFroummEvwV17na7tyh1pGbbeWCRdWtTKqeg=w950-h950)
