Skip to content

Posts from the ‘ASP.NET Security’ Category

0October 1, 2020The Future of IdentityServer

0January 11, 2019Using OAuth and OIDC with Blazor

14January 11, 2019Same-site cookies, ASP.NET Core, and external authentication providers

8January 3, 2019The State of the Implicit Flow in OAuth2

2July 15, 2018Beware the combined authorize filter mechanics in ASP.NET Core 2.1

1July 9, 2018IdentityManager2

9August 30, 2017Beware in ASP.NET Core 2.0: Claims transformation might run multiple times

0May 26, 2016Don’t use TOTP for password resets

3May 25, 2016oidc-client re-released

8November 18, 2014Sliding and absolute expiration with cookie authentication middleware

75April 9, 2014Introducing Thinktecture IdentityManager

84February 11, 2014Introducing IdentityReboot

7February 11, 2014Concerns with two factor authentication in ASP.NET Identity v2

8February 10, 2014How MembershipReboot mitigates login and two factor authentication brute force attacks

14February 9, 2014How MembershipReboot stores passwords properly

37January 9, 2014A primer on external login providers (social logins) with OWIN/Katana authentication middleware

13October 27, 2013Host authentication and Web API with OWIN and active vs. passive authentication middleware

101October 24, 2013A primer on OWIN cookie authentication middleware for the ASP.NET developer

25October 22, 2013Announcing Thinktecture EmbeddedSts — a simple, local STS for ASP.NET applications

114October 20, 2013The good, the bad and the ugly of ASP.NET Identity

37July 29, 2013Announcing MembershipReboot

4July 3, 2013Preventing clickjacking using Thinktecture IdentityModel

66January 26, 2013Replacing forms authentication with WIF’s session authentication module (SAM) to enable claims aware identity

25January 17, 2013Adding custom roles to windows roles in ASP.NET using claims

3December 15, 2012CORS and Windows Authentication

16October 19, 2012Password management made easy in ASP.NET with the Crypto API

10September 5, 2012Integrating Claims and OAuthWebSecurity

30September 4, 2012Using OAuthWebSecurity without SimpleMembership

64September 2, 2012Think twice about using MembershipProvider (and SimpleMembership)

23July 8, 2012MVC 4, AntiForgeryToken and Claims

11June 21, 2012Use the MachineKey API to protect values in ASP.NET

15June 4, 2012Membership is not the same as Forms Authentication

18May 23, 2012Think twice about using RoleProvider

6April 8, 2012Cookieless session considered dangerous