Click here to Skip to main content
15,886,806 members
Everything / Authentication

Authentication

authentication

Great Reads

by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
by DotNetLead.com
Azure AD for authentication and authorization of users for your website
by ASP.NET Community
Reference about Forms Authentication in ASP.NET
by Thang Believe
Deep dive into cookies generation to support Remember Me at login

Latest Articles

by Nicolas DESCARTES
How to implement authentication in Blazor and ASP.NET Core ?
by Jim_Gray
Example code showing how to use Subtle Crypto to sign your request to Azure API in pure JavaScript or jQuery
by Ohad Redlich
authentication-flows-js is a powerful and highly customizable middleware for Node.js that covers all flows that any express-based authentication-server needs
by DotNetLead.com
Azure AD for authentication and authorization of users for your website

All Articles

Sort by Score

Authentication 

26 Nov 2020 by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
10 Jul 2012 by sanjayv.gade
Issue solved:1. Open iis and select the website that is causing the 4012. Open the “Authentication” property under the “IIS” header3. Click the “Windows Authentication” item and click “Providers”4. Move NTLM at topand BAM that's fixed it.
2 Aug 2017 by ASP.NET Community
Reference about Forms Authentication in ASP.NET
29 May 2014 by Thang Believe
Deep dive into cookies generation to support Remember Me at login
29 Nov 2020 by Aram Tchekrekjian
Easily secure ASP.NET Core Web API using API Key Authentication - just follow a few steps and secure your endpoints
16 Mar 2018 by Richard Deeming
That's exactly what the ReturnUrl is pointing to. It just has to be encoded to be used in a querystring parameter. But you have more serious issues to deal with: Your code is vulnerable to SQL Injection[^]. NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query. ...
4 Jan 2013 by Vyacheslav Voronenko
Compact One Time Password Generator (RFC6238) written in javascript
2 Apr 2014 by Gareth Barlow (NBNi)
Integrating Roles Based Access Control with the Azure Active Directory Graph API in a ASP.net MVC application
1 Jun 2015 by Mathi Mani
Authenticate WebAPIs with Basic and Windows authentication
19 May 2021 by Ohad Redlich
authentication-flows-js is a powerful and highly customizable middleware for Node.js that covers all flows that any express-based authentication-server needs
8 Nov 2020 by DotNetLead.com
This article shows you how to add Windows Authentication to Angular and .NET Core Web API projects.
15 Feb 2013 by Espen Harlinn
It's not unknown, 0x80005000 means that "The specified directory service attribute or value does not exist". It will sometimes occur under a heavy load, when the global catalog server may fail to authenticate a client by using Kerberos.Best regardsEspen Harlinn
11 Oct 2013 by ASP.NET Community
"ASP.NET Membership builds on the success of the Forms authentication model from ASP.NET 1.x. ASP.NET Forms authentication provides a convenient way
11 Oct 2013 by ASP.NET Community
Following Codes demonstrates how to send an email with SMTP Authentication using ASP.NET 3.5using System.Net.Mail        MailMessage msgMail =
20 May 2014 by Aaron Hartley
I have a C# windows application written in VS 2010 that uses SQL Server Express database as the back-end. I'm finding that I have a need for having different users with different rights, to limit how much damage can be done by careless users. For example, one highly trusted user can mass delete...
29 Dec 2015 by arif_uap
Build your own web-api using new ASP.NET 5 with EF and IdentityUser inside OSX
17 Jul 2016 by Andy Point
Firebase Android Tutorial : Adding Registration and Login Hello Developers, this is our android firebase tutorial. In this tutorial we will create an android firebase app that will use firebase android login functionality. This post will help you get you up and running with integrating Firebase to a
20 Apr 2018 by AkiStar
Aunthentication of user using canActivate routing in Angular
8 Oct 2019 by Ger Hayden
These notes are based on my experience getting started with IdentityServer4.
22 Jan 2023 by Richard Deeming
Your authentication and authorization policies are nothing to do with CSRF. CSRF occurs when an authenticated user on your site visits another site, and that site is able to trick them into issuing a request to your site to perform an action...
16 Mar 2018 by Patrice T
cmd_Check_UserData.CommandText = "select * from VIEW_LOGIN where username = '" + txtUsername.Text + "' and password = '" + txtPassword.Text + "'"; Not a solution to your question, but another problem you have. Never build an SQL query by concatenating strings. Sooner or later, you will do it...
10 Apr 2024 by Graeme_Grant
Quote: When Manager clicks either of the link, it hits the endpoint and their response is Captured in Database. To prevent sharing, the only option is for the intended recipient to log back in, then you verify both the account used to sign in...
28 Jun 2012 by Sergey Alexandrovich Kryukov
Asking for the source code is probably a bit too much for now. As far as I can understand things, they look like this: fingerprints is one thing, WCF security model is another one; and you have to put them together.Please see this CodeProject article:A Framework in C# for Fingerprint...
2 Jul 2012 by OriginalGriff
Start by looking at an Introduction to Membership[^] - it includes a Role provider which allows you to classify users as you require.
2 Jul 2012 by Prasad_Kulkarni
Refer:ASP.NE...
30 Sep 2012 by Shastri_nitin
class Program { [System.Runtime.InteropServices.DllImport("advapi32.dll")] public static extern bool LogonUser(string userName, string domainName, string password, int LogonType, int LogonProvider,ref IntPtr phToken); static void Main(string[] args) ...
21 Dec 2012 by orouit
This article shows how to login to a cloud storage like Box by entering the credentials in a dialog window rather than in a Web page.
14 Jan 2013 by Monish cse
I am going to implement PKINIT in kerberos for my project. I am totally confused in starting the coding part, I know all the theoretical parts of kerberos like how client, KDC and Application server works. I want help in implementation part like,1. What are all the libraries and API's must...
23 Jan 2013 by Jeroen E
I have the following situation:An android app is calling my c# webservice. In the HTTP header there will be a token which I have to check each time my webservice is called in order to validate the identity of the caller.I would like to stress that my webservice is not a WCF service, its...
15 Feb 2013 by Mike Meinz
I found a bunch of occurrences of 0x80005000 Google Search. Here's one of them: 0x80005000 using LDAP in VBScript - caused by forward slash ("/") in a group name.
20 Feb 2013 by Sergey Alexandrovich Kryukov
Basically, you would need to use a cookie.People explained the technique in many places. For example:http://stackoverflow.com/questions/3118717/how-to-handle-remember-me-in-the-asp-net-membership-provider[^].Want to find other code samples? See http://bit.ly/YAUv8o[^].My concern is...
18 Jul 2013 by ridoy
You should check these..Login Form Validation in C#[^]http://stackoverflow.com/questions/549/the-definitive-guide-to-forms-based-website-authentication[^]http://msdn.microsoft.com/en-us/library/aa702565.aspx[^]verify user name and password in c# form[^]
25 Nov 2013 by ♥…ЯҠ…♥
Hi Reddy,You can find your deep explanation over here[^]Hope this helps you a bit.Regards,RK
15 Dec 2013 by Developer Hemu Patel
Hello,I have Created WCF REST API which use the EWS Managed API to use the Exchange server functionality. WCF REST API provides the request and and response format in json.But for each client request, I need to do authentication and to create Exchange service object on WCF Rest...
19 Dec 2013 by OriginalGriff
Never, ever, accept code from a insecure website to handle anything to do with real money.You do not know who is giving you the code, you do not know what it does, you do not know that it places the monies correctly into the appropriate account, without passing the details to any third...
13 Apr 2014 by frostcox
Hey I'm just wondering if anyone can help me out. I need to configure my web site to deny all anonymous users apart from one specific user.Web Config WCF Client :string username = "Bob";string...
13 Aug 2014 by Dnyaneshwar@Pune
see thishttp://world.episerver.com/Documentation/Items/Developers-Guide/EPiServer-CMS/75/Security/Configuring-Web-Services-authentication/[^]
1 Sep 2014 by Yogesh Kumar Tyagi
please go through below linkhttp://mvolo.com/iis-70-twolevel-authentication-with-forms-authentication-and-windows-authentication/[^]
4 Dec 2014 by forccyy
Below is the code I am using for sending mail from my local. I have WCF class library project where this code is written. I am calling this function from ASP.net website.I am getting error :"Mail not sent : The SMTP server requires a secure connection or the client was not authenticated....
18 Apr 2015 by Kornfeld Eliyahu Peter
Obviously default credentials can't go through the proxy...You have two options:1. Add a DLL that does the authentication via module element: https://msdn.microsoft.com/en-us/library/6w93fssz(v=vs.110).aspx[^]...The DLL must contain a class implementing IWebProxy[^]2. Do all the proxy...
7 May 2015 by arash2
Hi everyone,I'd like to have DB Logins registered for each user and to have custom connection string for each one. The main benefit of this approach is security. For some reasons, our users need to have their DB password, e.g. taking DB backups, ... .So for example if I want to register a...
10 Apr 2019 by User 10778296
I've been searching the web for this, and couldn't really find a solution that actually worked. Situation is as follows: I've got a WPF application, where I want to present the user with a simple logon form. Trying to work MVVM, so I've got a LoginViewModel with the following code behind the...
23 Jun 2015 by Richard Deeming
This is a very interesting problem. :)My first thought was that the Thread.CurrentPrincipal depends on the current thread, and an async method would end up setting it on the wrong thread. However, it appears that this property is associated with the logical call context, which correctly...
10 Feb 2016 by Dave Kreskowiak
You're definitely not the first person to want to do this. You could have easily found the answer yourself with a little research effort. Google for "asp.net show controls if user is an administrator[^]".
8 Apr 2016 by Maxim Komlev
Suppression of Browser dialog of Basic Http Authentication and customization
30 Apr 2016 by Kornfeld Eliyahu Peter
Use your own IUserTokenProvider[^] implementation to handle those tokens, and create six char long one, when purpose is 'Confirmation'...
22 Oct 2016 by LKC05
Is it possible that form authentication can work in asp.net without cookies? I have learnt some where that without cookies authentication work normally but with help of token in query string but when I am disabling cookies my form authentication is failing with message in browser "This page was...
22 Oct 2016 by Suvendu Shekhar Giri
While we don't know your code as you haven't shared yet but, you may like to start by reading some good articles on this and try to do the changes as described in following articles-Understand How the ASP.NET Cookieless Feature Works[^]How to get Cookieless FormsAuthentication to work with...
22 Oct 2016 by Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)
Yes you need configuration setting. Refer - How to get Cookieless FormsAuthentication to work with self-issued FormsAuthenticationTickets and custom UserData - Scott Hanselman[^].Quote:
24 Aug 2017 by Graeme_Grant
The official sites have great tutorials: * Security, Authentication, and Authorization with ASP.NET MVC | The ASP.NET Site[^] * Browse our Courses: SQL, Azure, O365 and More - Microsoft Virtual Academy[^]
28 Feb 2019 by MadMyche
I would review the MS Documentation on Basic Authentication and look at the section for configuration of login domains Basic Authentication | Microsoft Docs[^]
13 Mar 2019 by F-ES Sitecore
What's wrong with one of the links you already posted? Create a secure ASP.NET MVC 5 web app with log in, email confirmation and password reset (C#) | Microsoft Docs[^] If it doesn't do what you want exactly then amend it so that it does.
7 Jan 2020 by phil.o
Use https. You just have to create a valid certificate for the server, once done you will have nothing else to worry about.
17 Aug 2020 by Sandeep Mewara
Was not aware of it. Looking at Google, seems the possible reason could be Quote: the redirection URI parameter being sent does not match the one registered for your client. It means - when you have created your API key you set the URL redirect...
23 Sep 2020 by Richard Deeming
This would require the attacker to have a valid certificate for the domain they're trying to intercept. There are generally two ways this can happen: A rogue or compromised CA. This tends to be caught fairly quickly, and that CA will be booted...
12 Apr 2021 by Codes DeCodes
I am using formsauthentication in Visual Studio 2019. Since I am using friendly urls, I have below shown code for forms authentication.
9 Apr 2024 by Pete O'Hanlon
You probably want to start by reading and implementing authentication using Use ASP.NET forms-based authentication - ASP.NET | Microsoft Learn[^]. To control access to web pages, and folders of pages, use Control authorization permissions in...
10 Apr 2024 by Pete O'Hanlon
I'm afraid you need to go back to whoever gave you the requirements and explain this is a monumentally bad idea, and also impossible to implement. If one manager forwards it to another, you can't prevent that, and you can't change the contents of...
N 24 Apr 2024 by Nicolas DESCARTES
How to implement authentication in Blazor and ASP.NET Core ?
27 Jun 2012 by Zafar248
I have installed SQL Server 2008 R2 (complete installation). Now when i try to connect to the report server it asks me for server credentials. the service account is set as local system. the account which i use is domain/user-pc and has no password.
27 Jun 2012 by Dec90
if your using windows 7 and trying to access a local reporting services try and run I.E(Internet explorer) as an administrator. Reporting Services is installed to allow anyone in the built in administrators group to access the site, make sure your account is in that group.
2 Jul 2012 by Luk Vandevyvere
Hi,I've just started learning ASP.Net (VS2008) and have two questions concerning authentication and authorization.I want to build a website where each users needs to login using a link on the top right of the page. After the login has succeeded, the username (and log off link) must be...
2 Jul 2012 by Raghunatha_Reddy_S
Hi,This is one of the samplehttp://www.asp.net/web-forms/tutorials/deployment/deploying-web-site-projects/users-and-roles-on-the-production-website-cs[^]
17 Jul 2012 by Sandeep Mewara
I believe you are talking of a username/password prompt that you get on your remote machine. If so, it is because of the browser setting. IE has an option to use the logged in user's username-password to login into a webpage. Following setting does this:For IE: Tools -> Internet Options ->...
4 Oct 2012 by Keifiechief
Resolved.I recreated the project using the intranet template as opposed to the internet one. Which is what I should have done from the start of course.The reason I used the wrong one in the first place was that I followed a tutorial when I started and didn't even look at what other options...
10 Oct 2012 by Prajyotr
I am having a vb.net application where i access SSRS reports in a web browser control using query string. I build the url and call the Navigate() method of webbrowser control with the url. My query is, I cannot pass the vb.net application logged in credential through the url. Bydefault the ssrs...
17 Oct 2012 by Sergey Alexandrovich Kryukov
The Windows application you can start up before any user is logged in is a Windows Service which is set up for auto start (you can see this option if you start the "Services" Control Panel applet). But it would not make any sense, because this could not be the UI application.The only thing...
22 Oct 2012 by Wendy2012
Hi. I am new in both curl and ASP.NET. I am trying to do the curl auth login in ASP.NET.For curl auth login, it will look like thiscurl -k https://localhost:8089/services/auth/login \-d username=admin \-d password=passSo in ASP.NET, i try out this:string url...
22 Oct 2012 by Z@db@khsh
I,m working out form authentication by reading this page:http://www.asp.net/web-forms/tutorials/security/introduction/forms-authentication-configuration-and-advanced-topics-cseverything was ok till I reach to "Writing Information to UserData" section, I copy the code to VS 2010 and run the...
24 Oct 2012 by Ed Gepulle
I am a newbie in .net and need your help gurus to finalize my code. Your helpf will be much appreciated.Here is the scenario:A user can register using the format eg. name@ourdomain.com. Usernames are their registered name in our domain. Registration will not be accepted unless they have...
24 Oct 2012 by Ed Gepulle
yes.user can be accepted his/her registration after only validating entry against the one existed in our domain.
24 Oct 2012 by Miguelribeiro
This can be achieved using an LDAP Query to your AD,here is a link which will help you achieve your requirementhttp://www.ianatkinson.net/computing/adcsharp.htm[^]
24 Oct 2012 by Ed Gepulle
thanks for your reply but i need to get deep into that. actually here is the code for logging in but i need to verify this login entry against the usernames in AD. can you share your code so i can manipulate it to fit my requirements?protected void log_Click(object sender, EventArgs e) ...
24 Oct 2012 by Ed Gepulle
how can i use my laptop to serve as an LDAP server?
24 Oct 2012 by Miguelribeiro
using System.DirectoryServices; //srvr = ldap server, e.g. LDAP://yourdomain.com //usr = user name of the person you are trying to autenticate, //pwd = user password of the person you are trying to autenticate, public bool IsAuthenticated(string srvr, string usr, string...