Quantcast
Channel: Security
Browsing all 4737 articles
Browse latest View live

Multiple User Authentication ASP.NET Core 2.0 Razor Pages

With help I was able to get my list from the Database to Display only the items for current logged user: userid which i tied to the OwnerID. But I want to know how to make it so I could put multiple...

View Article


Image may be NSFW.
Clik here to view.

using web form template authentication in existing web form project

I am trying to implement login authentication using webform template. Previously, I have used simple login process using stored procedure. Now I want to change my login process to the template provided...

View Article


Didnt Follow Googled Explanations - The entity type 'IdentityUserLogin'...

I have imported my existing app into a new one to add authentication.  However now it wont load giving me :System.InvalidOperationException occurred  HResult=0x80131509  Message=The entity type...

View Article

ASP.Net Membership - Configure SQL User

Hi,Does anyone know how to appropriately configure a SQL database user to access all the necessary SQL membership sp's/tables/views....? I have installed SQL membership in a SQL server database but i...

View Article

Store Claims in MVC and it is not persisting in subsequent action call

Hi All,I am trying to impelement Claims Authentication in my application. I am using Asp.Net MVC as client and Web Api as service and both are different Solution/project.I am getting token information...

View Article


Identity Provider Class

HI Can any one help me how to handle below scenarioi have 2 systems , employee portal and a financial website both does not have access to each others database.i need to provide a Single Sign ON...

View Article

Secure WebApi so that users from an app can access it

Hey.I followed this article:https://blogs.msdn.microsoft.com/martinkearn/2015/03/25/securing-and-securely-calling-web-api-and-authorize/#comment-8355Unfortunately the access of .../Token is not...

View Article

Why is a refresh token usually not a jwt?

Just curious as why most people doesn't store refresh token as jwt.

View Article


Ivdividual User Accounts and Roles HELP MVC

Hello all,I have spent many years tinkering with web form applications. I decided I'd try learning MVC so I downloaded VS 2017 Community. Ive been disappointed from the very start that the old familiar...

View Article


Is there any example how to implement a Token Based Authentication for...

Hi,i am searching for weeks for an example how to implement a Token Based Authentication for WebAPI2 WITHOUT the use of ASP.NET Identity? Everything what i have found is based on ASP.NET Identity. I...

View Article

ASP.Net Identity & Windows Authentication

This is driving me crazy and yet should be so simple...I have an intranet site, ASP.NET MVC and WebApi.All users will exist in the Domain, but their First Name, Last Name, and Roles will come from our...

View Article

Add claim to existing principal while user is signed in

I want to add a Claim to the List<Claim> inside the principal that I'm using for my Cookie authentication when users verify their email account.

View Article

custom policy based authorization conventions

I'm reading about custom policy based authorization and I'm writing the requirement and handler classes but I'm wondering where I should save these files at by convention.  Right now they're in the...

View Article


Security issue using ASP.NET on VS Community 2015 and SQL Express 2014

Newbie to ASP.NET here. I trying to follow a tutorial (Getting Started with ASP.NET 4.5 Web Forms and Visual Studio 2013.pdf), I'm following step by step. All seems to be find, the solution builds...

View Article

Windows authenticated MVC application with pages/folders forms authenticated

I have a windows authenticated MVC web application and I require certain view/sub-folders to be forms authenticated against AD.  I can do the Forms Auth against AD for a whole site but how to do it for...

View Article


Session Replay in ASP.Net Forms authentication

Hello,During Penetration testing of my ASP.Net web forms application, following issues has been reported:-.1. ASP Sessions can be replayed.I am using forms authentication with below...

View Article

IServiceCollection AddAuthorization - Missing assembly reference

Hi All,I am trying to implement Authorization Policy in Asp.Net MVC. I am using Visual Studio 2017 community edition for my development.1. Missing assembly reference for IServiceCollection - I...

View Article


Where to Store the Client-ID and Client-Secret (OAuth2.0)

Hello,I'm having a Wierd Doubt in OAuth2.0  (Maybe I'm wrong) - Please Correct me if am wrong I'm going to Implement OAuth Password grant type in my Mob APP.So I did some research on the...

View Article

Identity 3 copy hashed password from one user to another in DB

Is there a way to ensure that a password generated (hashed) for a user can only be used / associated by that user?In other words I want to prevent:Hashed password is stored in the DB for user "a"....

View Article

Change default ASP.NET Identity Two-factor remember Cookie Expire Time

I have been using ASP.NET Identity 2.2.1. Following is the code in post method of VerifyCode action.var result = await SignInManager.TwoFactorSignInAsync(model.Provider, model.Code, isPersistent:...

View Article
Browsing all 4737 articles
Browse latest View live