Clik here to view.
Thinktecture.IdentityServer for .NET 4.5
I have uploaded the first bits of the 4.5 version of IdentityServer to github. I didn’t have time to test this extensively, but since some people have asked me about it, I just uploaded the current...
View ArticleClik here to view.
.NET Rocks on Identity in 4.5 & Windows 8
It is that time of the year again – I recently chatted with Carl and Richard on the new identity features coming in .NET 4.5, Windows 8 and Windows Server 2012....
View ArticleClik here to view.
Web API Sample for Thinktecture.IdentityModel (.NET 4.5)
I added a Web API sample to the github repository. It’s the code I showed at NDC and in my previous posts. Have fun. Filed under: IdentityModel, WebAPI
View ArticleClik here to view.
Thinktecture.IdentityModel.Http (.NET 4.0) updated to MVC 4 RC
Phew..It is getting confusing with all those RCs and versions Anyhow – here you can find the port to MVC 4 RC (from Beta). Filed under: IdentityModel, WebAPI
View ArticleClik here to view.
Updated NuGet Packages for IdentityModel.Http and 4.5
Thinktecture.IdentityModel.Http (.NET 4.0/MVC 4 RC) and Thinktecture.IdentityModel.45 (.NET 4.5 RC) now have updated Nuget packages. See here. Filed under: IdentityModel, WebAPI Tagged: #aspnetwebapi
View ArticleClik here to view.
Thinktecture.IdentityModel.45 and ASP.NET Web API Self-Hosting
One nice “side-effect” of implementing all authentication methods at the Web API layer (MessageHandler) is, that you get hosting independence. The exactly same configuration for the authentication...
View ArticleClik here to view.
My Sessions from NDC 2012
All videos from NDC are online now. This is great content, go check it out! Authentication & Authorization in .NET 4.5 – Claims & Tokens become the standard Model Securing ASP.NET Web APIs...
View ArticleClik here to view.
Update on Thinktecture.IdentityModel and Web API Support
I have cleaned up the github repositories, it became too confusing with all the different versions. The new layout is this: Thinktecture.IdentityModel.45 (github)No changes here, this includes the...
View ArticleClik here to view.
Session Token Support for ASP.NET Web API
Disclaimer: This is an experimental feature I added to Thinktecture.IdentityModel.45 (and will soon be back-ported to 4.0) to gather some feedback. It is completely turned off by default. The idea is...
View ArticleClik here to view.
Introduction to Identity and Access Control in .NET 4.5
I am working together with PluralSight on creating a full fledged curriculum around identity & access control for .NET and Windows. This will include training material around core .NET identity...
View ArticleClik here to view.
Taking Control over Azure Access Control Service HRD (without the Help from...
Vittorio wrote a post earlier today showing how to fetch the identity provider feed from ACS and use it to drive the sign-in handshake from within your application and UI. This is indeed a very useful...
View ArticleClik here to view.
Approaches to (Server-side) Authorization
Authorization is a difficult topic. The implementation is typically so application/developer specific, that when you ask ten people how they do it, you most likely get ten different answers. I think...
View ArticleClik here to view.
Thread.CurrentPrincipal and Propagation to new Threads
I often get questions about this. Here’s an interesting post about the so called “Execution Context” in .NET:...
View ArticleClik here to view.
Extending Authorization in ASP.NET Web API – Part 1: Basics
From my last post you can maybe tell that I prefer to keep my business and authorization logic separate. I am also not a huge fan of annotating my façade with role requirements like the [Authorize]...
View ArticleClik here to view.
New unified Nuget Package for Thinktecture.IdentityModel
I uploaded a Nuget package for Thinktecture.IdentityModel that contains both the 4.0 and 4.5 versions. That should make it easier. We will try to keep both framework versions as closely in sync as...
View ArticleClik here to view.
Update on Thinktecture.IdentityServer for .NET 4.5
I made some progress on the 4.5 version. It is now a real .NET 4.5/MVC 4 application and I made some minor changes to data handling: Switched to the new universal providers for ASP.NET Switched to SQL...
View ArticleClik here to view.
Session Token JavaScript Sample for Thinktecture.IdentityModel and Web API
Christian has added a new JavaScript sample that shows how to use the session token mechanism. It includes persisting the session token in local storage. Nice! github Filed under: IdentityModel, WebAPI
View ArticleClik here to view.
CORS support in WebAPI, MVC and IIS with Thinktecture.IdentityModel
Brock has added a really nice implementation of CORS to Thinktecture.IdentityModel (both 4.0 and 4.5). Here are all the details. Filed under: IdentityModel, WebAPI
View ArticleClik here to view.
MachineKey based Session Protection for WIF
When using the session facility in WIF (e.g. in ASP.NET with the SessionAuthenticationModule), the session token must be protected somehow. By default WIF uses the Windows built-in DPAPI mechanism....
View ArticleClik here to view.
WCF and Identity in .NET 4.5: Overview
Since every principal is derived from ClaimsPrincipal in .NET 4.5 all the higher level frameworks simply get “claims for free” – including ASP.NET and WCF. Generally speaking there are two new settings...
View Article