Browse by Tags
All Tags »
Security (
RSS)
Last Christmas I blogged about how to make ASP.NET MVC users authorized only if they have profiles created . This works well on public sites where everybody can be user. Sometimes we don’t want to let all users to our system even when they were correctly...
This is my first webcast on Windows Identity Foundation (WIF) and it will give you brief overview of this technology. I will tell you about how I found WIF, what is claims-based authentication, what tools are available and how you can use WIF in your...
I am building ASP.NET MVC application that uses external services to authenticate users. For ASP.NET users are fully authenticated when they are redirected back from external service. In system they are logically authenticated when they have created user...
If you are using AppFabric Access Control Services to authenticate users when they log in to your community site using Live ID, Google or some other popular identity provider, you need more than AuthorizeAttribute to make sure that users can access the...
In my last posting about AppFabric Labs Access Control Service I described how to get your ASP.NET MVC application to work with ACS . In this posting I will dig deeper into tokens and claims and provide you with some helper methods that you may find useful...
In my last posting I introduced my idea about common membership provider for ASP.NET that is able to support multiple authentication providers. Before writing membership provider we need support for some authentication providers to get an better idea...
I am trying to implement form based authentication (FBA) membership provider that is able to support multiple authentication mechanisms. Take it as an self-training experiment. In this posting I will introduce bases of my experiment and introduce my current...
Web page that is not attacked by security team or developers and testers before going to live can be considered as unsecure because nobody knows how it behaves under attacks. Unfortunately there are many web pages that are not secure and not event tested...
More Posts