An alternative way to build and bundle Javascript, CSS in ASP.NET Core MVC...
This article shows how Javascript packages, files, CSS files could be built and bundled in an ASP.NET Core MVC or Razor Page application. The Javascript packages are loaded using npm in which most...
View ArticleASP.NET Core Identity with Fido2 WebAuthn MFA
This article shows how Fido2 WebAuthn could be used as 2FA and integrated into an ASP.NET Core Identity application. The Fido2 WebAuthn is implemented using the fido2-net-lib Nuget package, and demo...
View ArticleUsing Certificate Authentication with IHttpClientFactory and HttpClient
This article shows how an HttpClient instance could be setup to send a certificate to an API to use for certificate authentication. In an ASP.NET Core application, the IHttpClientFactory can be used to...
View ArticleBuilding and securing an ASP.NET Core API with a hosted Vue.js UI
This article shows how Vue.js can be used together with ASP.NET Core 3 in a single project. The Vue.js application is built using the Vue.js CLI and built to the wwwroot of the ASP.NET Core...
View ArticleSecuring an ASP.NET Core Razor Page App using OpenID Connect Code flow with PKCE
This article shows how to secure an ASP.NET Core Razor Page application using the Open ID Connect code flow with PKCE (Proof Key for Code Exchange). The secure token server is implemented using...
View ArticleAdding FIDO2 Passwordless authentication to an ASP.NET Core Identity App
This article shows how FIDO2 WebAuthn could be used for a passwordless sign in integrated into an ASP.NET Core Identity application. The FIDO2 WebAuthn is implemented using the fido2-net-lib Nuget...
View ArticleSecuring a Web API using multiple token servers
This article shows how a single secure Web API could be used together with multiple secure token servers. The API uses JWT Bearer token authentication, but because the access token come from different...
View ArticleUser claims in ASP.NET Core using OpenID Connect Authentication
This article shows two possible ways of getting user claims in an ASP.NET Core application which uses an IdentityServer4 service. Both ways have advantages and require setting different code...
View ArticleWPF Azure AD signin with Sharepoint Online API call using Graph API
This article shows how a native WPF application could authenticate and authorize using an Azure Active Directory App Registration and then upload and download files in Sharepoint Online. The Graph API...
View ArticleUsing HTTP Request Routes, Request Body, and Query string parameters for...
This post shows how HTTP route parameters, a HTTP request body or HTTP request query string parameters can be used for authorization in ASP.NET Core. Code:...
View ArticleForce ASP.NET Core OpenID Connect client to require MFA
This article shows how an ASP.NET Core Razor Page application which uses OpenID Connect to sign in, can require that users have authenticated using MFA (multi factor authentication). Code:...
View ArticleSend MFA signin requirement to OpenID Connect server using ASP.NET Core...
This post adds the custom ASP.NET Core Identity, IdentityServer4 logic to check for the “acr_values” and react if a client application requests MFA for authentication. The “acr_values” parameter is...
View ArticleRequiring MFA for Admin Pages in an ASP.NET Core Identity application
This article shows how MFA could be forced on users to access sensitive pages within an ASP.NET Core Identity application. This could be useful for applications where different levels of access exist...
View ArticleCreating Certificates for X.509 security in Azure IoT Hub using .NET Core
This article shows how to create certificates in .NET Core which can be used for Azure IoT Hub. The chained certificates are created using the nuget package CertificateManager. Code:...
View ArticleCreating Certificates in .NET Core for Vue.js development using HTTPS
This article shows how to create development certificates for a Vue.js application, so that you can develop using HTTPS. The certificates are created using the CertificateManager nuget package. Code:...
View ArticleCreate Certificates for IdentityServer4 signing using .NET Core
This article shows how to create certificates for an IdentityServer4 application to use for signing and token validation. The certificates are created using the CertificateManager nuget package. Both...
View ArticleProvisioning X.509 Devices for Azure IoT Hub using .NET Core
This article shows how Azure device provisioning service can be used to setup an Azure IoT Hub and provision devices using X.509 certificates in an enrollment group. The certificates are created using...
View ArticleUsing Azure Service Bus with restricted access
Azure Service Bus provides many ways to setup different access levels for all types of things like the bus itself, queues, topics or subscriptions. In this post some of the ways to configure the...
View ArticlePublish Nuget packages in Azure DevOps Pipelines
In Azure DevOps, Pipelines can be used to build your solution, create a Nuget package and publish the Nuget package to the Nuget feed for further usage. This post shows how you can implement this and...
View ArticleCreate Azure Infrastructure with Azure DevOps and Azure CLI Powershell scripts
In Azure DevOps, Pipelines can be used to create Azure infrastructure using Azure CLI and Powershell. This blog shows how to create a simple resource group in Azure using Azure DevOps Pipelines. Create...
View Article