Notes
Notes - notes.io |
Approach A: ASP .NET Core Identity
cookie-based authentication
cookie middleware system
claim-based authentication
ClaimsPrincipal class: ex: John Smith'a user account
ClaimsIdentity class: ex: John Smith's student ID card or his driver license
claim: ex: Driver license ID
policy-based authorization
[Authorize(Policy="policyname")]
classes: IdentityUserClaim
default access denied page
Identity services:
classes:
IdentityUser, IdentityRole, IdentityDbContext
UserManager<>, SignInManager, User
attributes:
[Authorize],[AllowAnonymous]
NuGet: 'Microsoft.AspNetCore.Identity.*' package
Approach B: token-based authentication, 'Identity Server Authentication'
for SPA, mobile, WebAPIs
able to do Single Sign On
Security Token Service (STS) [uses 'OpenID Connect (OIDC)' on 'OAuth2' standard]
Create the service:
- Custom: Identity Server Framework
- Prebuild: Active Directory Federation Services
Token: ie. JSON Web Token (JWT ['dzsát'])
Concepts:
Client: the software, requests tokens from identity server
User: also registered on identity server
Resources: - Identity resources
- API resources
Tokens: - identity token
- access token
External Identity Provider
Other concepts: credentials
NuGet: IdentityServer4
DEF principle of least privilege: no more rights than needed
https://www.linkedin.com/learning/web-security-oauth-and-openid-connect/how-does-oauth-2-0-work-and-what-problems-does-it-solve?u=2113185
|
|
Notes.io is a web-based application for taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000 notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 12 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
