Restrict the uses of oauth security token generated with ASP.NET WEB API 2.0 to one user device only

Question

0.00/5 (No votes)

See more:

I have successfully created ASP.NET WEB API 2 project with OAuth security token and it is working fine but there is one issue with this. When I copied the security token generated by this API for an authenticated user by providing correct user id and password, after that using it (same copied security token) on different machine( on the same network via LAN) it does allow to access all the pages!

How I can restrict this type of behavior means a security token generated by the API for a User should work only on his/her device.

Any help with the code example or link to that would be appreciated and I am open for the JWT as well.

Thanks in advance.

What I have tried:

I have seen this post : Security concerns regarding unique JWT token in asp.net web api c# but does not found any helping code to achieve this.

Posted 9-Mar-19 5:27am

sharadverma_VNS

Add a Solution

Comments

MadMyche 9-Mar-19 15:44pm

What if the user has more than 1 device? I access things on my home computer, my work laptop, and a tablet.

sharadverma_VNS 29-Aug-19 3:57am

It may be your case but what I explained here is the real requirement of the project, please tell me if you have any solution for that. I am still looking for the solution .

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)