Click here to Skip to main content
15,891,316 members
Everything / Authorization

Authorization

authorization

Great Reads

by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
by Habibur Rony
This article mainly covers how to setup and configure Azure AD tenant and integrating Azure AD into ASP.NET Core 2.0 web app for authentication and role based authorization.
by Rubén Hinojosa Chapel
Prototype for a plugin architecture based on the Prism Library and the Modern UI for WPF (MUI) toolkit
by DotNetLead.com
Azure AD for authentication and authorization of users for your website

Latest Articles

by Bohdan Stupak
This article describes a super-minimalistic auth endpoint based on AWS Lambda.
by Utku Ozan ÇANKAYA
Basics of improving WCF service quality
by SleepyCrat
How to secure a website using Firebase, Angular 8 and ASP.NET Core 3.1
by DotNetLead.com
Azure AD for authentication and authorization of users for your website

All Articles

Sort by Updated

Authorization 

18 Aug 2014 by -Dr_X-
You should be able to capture the user's unique login SID and store it in Oracle. I do the same for SQL. However, my roles are custom application driven.
5 Nov 2018 by 1suli0
Well, after a few hours of googling, I still can't find an answer, not even partial one. Is this even possible, or it must be custom solution? What I have tried: I've played around with locked out feature of Identity, but it seems, that is not the answer, because in that scenario user is...
3 Sep 2019 by Afzaal Ahmad Zeeshan
Quote: The authorization server has a login-screen which will be used to authenticate users. The scenario I faced is, I need to use a common login-screen so that I login into the application that is already functioning? It seems as if you are trying to implement OAuth. Which means, that you want...
12 Apr 2015 by Am Gayathri
How do i use google auth with mvc4 and javascript to redirect to another page with name on successful login ?Am trying to do google sign in on my web application. I could do this using javascript. But i want to redirect to another page on successful login.See below...
26 Nov 2020 by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
3 Dec 2014 by Assil
This post demonstrates the simplest use of OWIN with ASP.NET. It will not teach you OWIN nor Claim-based auth, nor design or security.
6 Jan 2019 by Aydin Homay
IdentityService is the best solution so far I know because it allows you to make service to service authentication and service to consumer authenitcation. I have used it in serveral projects successfully and got a good results.
3 Aug 2022 by Bohdan Stupak
This article describes a super-minimalistic auth endpoint based on AWS Lambda.
12 Jul 2016 by brzydkimech
Hi guys. I have a problem with windows authentication in ASP.NET. Maybe the soludtion is easy but I've stacked in one place and I can't move forward. Let me describe my problem. Even though I've placed all required configuration in web.config (I think I put all of them). ...
6 Jan 2019 by Cas Dijkstra
Hi, I'm planning to write a few api's to improve my programming knowledge. But as a starter I'm thinking about authentication. I've been searching for a solution, but I'm wondering if there are better options. What I want to achieve is to have a AuthenticationAPI which handles the...
17 May 2018 by Chillin92
Currently, my project is using Hmac-SHA256 to do the authorization in APIM. We are struggle with how to generate, transmit and store the secret key between client side and ours. Is there any secure way to do this? What I have tried: For now, we are generating the secret key through openssl...
24 Apr 2018 by Dave Kreskowiak
Only if the site hosting your software supports it. Truthfully, one "one-time" code is useless. If the download fails or is interrupted for some reason, the user has to go get another code. It would be better to generate a login account and password for the user instead.
5 Apr 2019 by David_Wimbley
Rather than trying to fit a square peg through a round hole, you need to refactor your code to something that will actually work and make sense. Calling controller code from an attribute doesn't make sense. Pull the IsValidUser method out of the Controller B, move it to a class called...
22 May 2015 by debashishPaul
Implementation of basic role based authorization in ASP.NET MVC5 with ASP.NET Identity 2.0
5 Aug 2016 by Deepak Jena
I have a working WebApi project where I need to add authentication and authorization. We have a User Database to verify login credentials. I am not sure how to start with implementing authentication in WebApi.I have went through the solution, understood the HMAC authentication completely...
10 Mar 2014 by Dineshkumar Ramakrishnan
Hi ,I want to create a Menu Control in asp.net, which is placed in the left pane of my UI Screen.I need this menu control with Collapsible and Expand Menu feature, That is,Main Menu-1 Sub Menu-1 Sub Menu-2Main Menu-2 Sub Menu-1 Sub Menu-2 From Above Shown...
23 Jun 2015 by F-ES Sitecore
You can use Identityhttp://www.asp.net/identity[^]When you start a new MVC project in Visual Studio there are a number of authentication options to choose from, so you can have it create a project with this already implemented so you can see how it all works.
13 Apr 2014 by frostcox
Hey I'm just wondering if anyone can help me out. I need to configure my web site to deny all anonymous users apart from one specific user.Web Config WCF Client :string username = "Bob";string...
19 Apr 2020 by Garth J Lancaster
Are you under the premise the PasswordHasher should be automatically called ? I did some research and wasn't convinced - I would have thought you'd need ApplicationUser user = _userManager.Users...; user.PasswordHash =...
8 Oct 2019 by Ger Hayden
These notes are based on my experience getting started with IdentityServer4.
22 Jan 2023 by GKP1992
Hello, We have a .NET core web application where we add and authentication scheme that creates an authentication ticket with claims identity. services.AddAuthentication(options => { options.DefaultScheme ...
22 Jul 2016 by Gooran
Hi. I need to call aspnet_UsersInRoles_IsUserInRole from Aspnet Membership.Im making dapper call like this:Best Regards.What I have tried:public int CheckIfUserIsInRole(IsUserInRole userInRole) { using (var connection = new...
1 Aug 2018 by Habibur Rony
This article mainly covers how to setup and configure Azure AD tenant and integrating Azure AD into ASP.NET Core 2.0 web app for authentication and role based authorization.
20 Jan 2016 by Indrajith Reddy
How do I trigger action filters placed to sub methods which I am calling from the directly requested action method ?In the below example SubmitViolation method will be requested from view and based on operation type I am calling other methods. I need to check the authorize permissions based...
8 Sep 2015 by Jithin Geroge
Windows universal app on developing asking for addition login with below message and waring. How to solve this ? I am using web api claims authorization for security login.Message : The server localhost is asking for your username and password.The server reports that is from...
16 Feb 2015 by John Atten
Identity is fully compatible with the OWIN Authorization model, and when used in this manner, represents a very useful, ready-to go concrete implementation.
13 Feb 2020 by Jonny Mai
so my exam is soon and I'm stumbling upon a confusing matter regarding passport, I am using express back-end and a "database"(just a map where key is the username and value is just a javascript object with the rest of the information) and I'm...
10 Oct 2019 by Joseph Rozario
This article explains how to implement Token Authentication and Authorization using JWT in ASP.NET CORE.
26 Feb 2022 by Kiddo 2022
import React, { createContext, useContext, useEffect, useState } from 'react' import { Text } from 'react-native'; import * as Google from "expo-google-app-auth"; import { GoogleAuthProvider, onAuthStateChanged, signInWithCredential, ...
27 Sep 2014 by Kornfeld Eliyahu Peter
There are endless articles about it - all you need is Google!!!http://msdn.microsoft.com/en-us/library/shz8h065(v=vs.110).aspx[^]http://www.asp.net/web-forms/tutorials/security/roles/role-based-authorization-cs[^]
26 Feb 2014 by KumarSundeep
Found a useful article on microsoft's site. Hope this will solve your problem.http://support.microsoft.com/kb/306355[^]
19 Apr 2015 by Maciej Los
Have a look here: OAuth 2.0 Generating Token and Secret Token [closed][^]
5 Feb 2019 by Maciej Los
Use Google![^]. There's a lot of examples, i.e.: ASP.NET Core MVC - Authentication And Role Based Authorization With ASP.NET Core Identity[^] Custom Authentication and Authorization in Asp.Net Core 2.0[^] and much more!
5 Nov 2018 by MadMyche
Welcome to the club of people looking for permanently disabling a user. We have used different versions of Identity going back about a decade, the method we ended up with was going custom; adding a AccountLocked [bit] field to the db schema. We do have an Admin interface to manage all of the...
12 Aug 2016 by Manoj Reddy Ch
Securing BizTalk WCF Receive Locations with SSL and Client certificate authentication and authorization.
8 Apr 2016 by Maxim Komlev
Suppression of Browser dialog of Basic Http Authentication and customization
18 Feb 2014 by Member 10191513
Please give me answer as soon as possible.I tried Twitterizer in refrence and used this below code:Twitter twt=new twitter("Username","Password");twitterstatuscollection this collection=twt.status.UserTimeLine();But i get Authorization Falied error..
23 Jun 2015 by Member 10791876
In my asp.net MVC4 Web Application i want to use any functionality through which the users of my web application can logon with their details that are stored in the project database, is their any specific mechanism for this?
24 Apr 2018 by Member 10850253
I was wondering if there is a way to generate a one time only passcode to enable a software download from a fileaharing website, for a software that I will be posting? What I have tried: I have tried looking for one time passcode download, but I am not getting the results I need.
17 Aug 2020 by Member 11072126
Hi All, I am trying to implement login functionality using the package: angular-auth-oidc-client for Angular 10 project. I have gone through the documentation and have configured service but getting the error: Message: redirect_uri_mismatch...
3 Feb 2016 by Member 12304977
I'm trying to save some informations into a file in the ApplicationData.Current.LocalFolder this way:private async Task WriteRecentScores(List list) { try { var serializer = new DataContractJsonSerializer(typeof(List)); ...
16 Feb 2017 by Member 12468321
I am using json auth api to authenticate the user.i am using my wordpress site hosted on 000webhost with https protocol.When i am logging in i am getting this error message :System.Net.WebException: The remote server returned an error: (401) UnauthorizedPlease i need help,suggestions...
1 Jun 2016 by Member 12559354
Hello,I've created a Web API 2 Project and set its authentication to No Authentication.Now, I want to change the authentication from No Authentication to Individual User AccountsHow can I do that?Thanks,Yashasvi JadavWhat I have tried:I have tried it by installing...
19 Apr 2020 by Member 13081540
am working with Microsoft.AspNetCore.Identity.UserManager and I'm trying to mock the creation of a new user. In fact, it does create a new user with username, email etc. but the password hash property is still null. This is how I set up mock...
8 Apr 2024 by Member 16239575
Hello, I want to do user-based page authorization with asp.net web forms. What I want to do is to take the role of the user while logging in from the users table in the database and control which pages he can access there, for example, let the...
22 Apr 2018 by Member 8773837
I had a site running in IIS 7.5 for more than a year now. It uses Windows Authentication..It was running fine until the server in which it was hosted was rebooted for a Windows update recently. After that in order to access the site an user has to be part of the Server Admin group or has to...
15 Jan 2017 by member33
Hello I was looking for simple example of implementing oauth2 in wcf rest service... all i could find are of with very complex examples.Thank you
17 Feb 2017 by Mosti16
Use a custom Authorize Attribute which use a own PermissionProvider with custom Permission-Management.
27 Sep 2014 by Narendra Singh
Hello I have developed a webpage where i need to upload a image of user . I wrote code for that and tested it on local server. But when i uploaded it on server it giving exceptionSystem.UnauthorizedAccessException: Access to the path 'C:\Inetpub\vhosts\pspl-it.com\site1\projects\SBI -...
1 Nov 2015 by Neohuman Software
How to: Using ASP.NET Identity using Azure Storage Tables
21 Jul 2018 by Nkumary
I Have used Passport-Google-OAuth in Node.js web service project. I am using OAuth2Strategy.The process i have used is i call the web service method to authenticate user from his Gmail account. Initially i serve the Raw HTMl which i receive from calling the Passport-google-OAuth. Which works...
16 Aug 2016 by Olubisi Akintunde
Application Managed Authorisation using Dependency Injection and Interception
29 Sep 2016 by OriginalGriff
Never, ever, accept code from a insecure website to handle anything to do with real money.You do not know who is giving you the code, you do not know what it does, you do not know that it places the monies correctly into the appropriate account, without passing the details to any third...
24 Apr 2018 by Patrice T
Quote: I was wondering if there is a way to generate a one time only passcode to enable a software download from a fileaharing website, for a software that I will be posting? "a one time only passcode to enable a software download" is the wrong place to put protection. A better choice is to use...
9 Apr 2024 by Pete O'Hanlon
You probably want to start by reading and implementing authentication using Use ASP.NET forms-based authentication - ASP.NET | Microsoft Learn[^]. To control access to web pages, and folders of pages, use Control authorization permissions in...
26 Aug 2014 by Pramod Sharma Tech
Securing routes in Angular is not available out of the box. This tip would help in securing routes in Angular based applications.
5 Aug 2016 by prateekfgiet
please refer Web APIs-Basic Authentication and Token based custom Authorization[^]
5 Feb 2019 by preetam kumar
I am looking to design application it will not have login page but it will get the email address from UserPrincipal.Current.EmailAddress. I need to validate the email address with the table in the database. Table name Users. and need to check the authentication level from userPermission Table....
15 Jan 2017 by Pritesh Gadhiya
Hello Sir/Madam, Any solution for OAuth 2.0 in wcf rest service?
6 Oct 2015 by RAHUL(10217975)
Hello All,I want to integrate SSO for Client. Client requires SSO (Windows Active Directory) using trust based connections. They might have multiple servers with domain/users. Any domain user of different server can access the WebApplication through SSO. I am new to this concept. I am...
26 Feb 2014 by ravikhoda
HI all,we need to change the default 403 forbidden access page to something else in window authentication. the idea is if user pass window authentication then user will be redirected to admin panel based on the roles. if user do not pass window authentication than it will take user to some...
16 Nov 2020 by Reza kavian
i use an asp.net core 2.2 project that send request to another project(web api),if i want to add identity (with rigth click to project and add identity), I have to do this in my own project or in the api project. if add identity in api...
22 Jul 2016 by Richard Deeming
That stored procedure doesn't return any records; it uses the return value instead. This needs to be handled as a parameter:public int CheckIfUserIsInRole(IsUserInRole userInRole){ using (var connection = new SqlConnection(ConfigurationSettings.GetConnectionString())) { ...
3 Oct 2017 by Richard Deeming
To specify configuration which only applies to a specific file, use the element: location Element (ASP.NET Settings Schema)[^] ... ...
22 Jan 2023 by Richard Deeming
Your authentication and authorization policies are nothing to do with CSRF. CSRF occurs when an authenticated user on your site visits another site, and that site is able to trick them into issuing a request to your site to perform an action...
23 Jun 2014 by rickolous
Hey guys, I am trying to solve one of the problems in the authentication section of pentesterlabs but I just can't seem to get it right. In essence, I am trying to use the urllib2 library in python for basic HTTP authentication, however despite providing the correct username and password I keep...
28 May 2021 by Robert Woodard
I have not had a lot of experience with DotNet Core. We have created a Portal for our users utilizing DotNet Core 3.1. I am just throwing this out there to get ideas on how to handle this if it is possible: In the portal we have a View where...
23 Mar 2016 by Rubén Hinojosa Chapel
Prototype for a plugin architecture based on the Prism Library and the Modern UI for WPF (MUI) toolkit
3 Oct 2017 by SaeedPol
I want to protect just the Admin page of my site but my code protects all pages. What changes should I make to my code? What I have tried: system.web>
17 Aug 2020 by Sandeep Mewara
Was not aware of it. Looking at Google, seems the possible reason could be Quote: the redirection URI parameter being sent does not match the one registered for your client. It means - when you have created your API key you set the URL redirect...
13 Oct 2020 by Sandeep Mewara
Believe following is what you are trying, a CP article: Use Twitter Bootstrap Modal Dialog for Smoother Login Experience[^]
13 Oct 2020 by sasko1
Hi! I have modal boostrap div that is called by action on button click. I want to be able to redirect user to login div when user tries to perform action he is not authorised to do. Can you give me some good resource so i could try to figure it...
11 Jul 2016 by satya inumarthi
Here I explain how to create custom authentication and mapping it to the default filters like Authorize, roles..etc
13 Jan 2018 by satya inumarthi
In this article I am going to explain how we can implement Authentication and Authorization in Web, WebApi as well as for other clients.
5 Jan 2017 by Sem Shekhovtsov
This article describes how to integrate Azure AD OAuth2 authentication method into .Net Core 1.0 (MVC) web application. The OAuth2 authentication method is required for using Microsoft Graph API services in particular.
11 Aug 2016 by sencsk
var client = new AuthyClient(goodApiKey, true);check the parameter for test or prod.
27 Mar 2014 by Sergey Nizhegorodtsev
The article explains step-by-step how to start programming using cryptocurrency API for Bitcoin, Litecoin, CrimeaCoin, etc. The working example has been written for Crimeacoin.
3 Mar 2018 by Shashangka Shekhar
In this post we are going to secure our NodeJS API’s with customized security token generated by logged user and HTTP actions.
11 Jun 2019 by Shweta Lodha
This article will walk you through the creation of ASP.NET Core application using ASP.NET Core 2.2 from scratch, by utilizing the capabilities of package manager, EF Core, Identity API, Razor Class Library, etc.
5 Apr 2019 by sid2586
I have existing logic to validate against database in place.For eg. I have two controllers, ControllerA & ControllerB, i have AuthorizeAttribute on ControllerA, Now when i get request for ControllerA action method, first my Custom AuthorizeAttribute get request it process some authorization...
8 Jul 2015 by Sir PuruSh
using as like above it's not working but when using as follows is workiung with...
24 Jul 2021 by SleepyCrat
How to secure a website using Firebase, Angular 8 and ASP.NET Core 3.1
19 Apr 2015 by solook1n
Hi, I want to write a server providing oauth2.0, but I meet some problems in generate code and token. is there a good algorithm ? thanks.
27 Sep 2014 by Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)
This is due to the permission issue for that folder in server.Please assign proper permission to the folder by going to its properties. Search the issue in Google for more information.
14 Jun 2014 by tahirgr8_2000
Dear Experts,I have following filesDisplay.aspx- Main File to displayWorkingsheet.Aspx- Working sheet which navigate from display.aspx Now whenever i submit button in Display.aspx, it will redirected to workingsheets.aspx.BUTBut i want to ask user credential from user with form...
24 Jun 2014 by tahirgr8_2000
Dear Freindsi have used someone else code and modified according to my need. It works and run smoothly. here login name and password authenticate with window domain as we used our login id and password for login. Now after successful running of this code, I have one issue that How to...
21 Dec 2014 by Telstra
We are using OpenID mechanism to login into our application using third party credentials. For this we have app id and app secret keys. But when we authorize the request we are facing the access token expiration time out error. Can anybody help me how to get the access token value and set its...
26 Jun 2015 by Thanks7872
See this : http://stackoverflow.com/a/6962332[^] or http://geekswithblogs.net/WillSmith/archive/2008/10/14/unauthorized-page-with-forms-authentication.aspx[^]And next time, don't ask 'I want to do this/that' type of question. Try something your self and ask specific questions only.Regards..
18 Feb 2014 by thatraja
Check their API. https://dev.twitter.com/[^]Browse there for more details. And you could find many jQuery widgets for this. In Codeproject I found this one.Recent tweets[^]
15 May 2014 by Tony Hallett
Hi, I have been writing some Pinvoke code for lower level WinAPI Access Control functions. I have a pointer to Privileges associated with my access token from the TOKEN_ACCESS_INFORMATION and I am looking at the privileges. I have working code but decided to refactor part of it to a...
27 Sep 2014 by Torakami
Hii ,asp.net provides asp.net configuration setting where we create role , and there only we need to create usernames and assign theme a role , But here my requirement is well i can create roles in asp.net configuration setting , but i dont want to create any users there as my...
14 Mar 2017 by Troy Bryant
I'm looking and struggling to find a way to pass authorization headers. My error is 405 Method not allowed Response for preflight has invalid HTTP status code 405. Struggling on how to pass that bearer token.Here is my...
28 Feb 2022 by Utku Ozan ÇANKAYA
Basics of improving WCF service quality
28 Nov 2017 by Uwakpeter
I have a project i built using MVC, i want to able to access the application via adfs authentication, i have read a couple of stuffs on how to achieve this but no joy yet! having this error: •Activity ID: 00000000-0000-0000-b5cc-0480020000eb •Error time: Tue, 28 Nov 2017 16:33:28 GMT •Cookie:...
18 Aug 2014 by V G S Naidu A
Hi, I need to implement the role based authorization, in my app which working on windows based authentication, and i am using the oracle database. i think membership work with forms authentication and with SQL server database. Here i am getting user names from domain and storing them in...
25 Nov 2015 by Venkata Durga Rao
My application is working fine on my system but while deploying on server(having load balancer).After signin into application some pages are open fine after navigating into some time after a while it going to startup.auth.cs and it going to never ending redirects.
15 Jul 2016 by Vignesh Mani
Windows authentication in asp.net Part 87 - YouTube[^]Hi friend above link help to solve your problem
16 Nov 2020 by Vincent Maverick Durano
The official documentation provides a ton of information for you to get started about it. Here you go: Create an ASP.NET Core app with user data protected by authorization | Microsoft Docs[^] Here's another useful article that you can refer to:...