JuergenGutsch / blog

Personal blog about web development based on .NET and .NET Core
https://asp.net-hacker.rocks/
Other
31 stars 17 forks source link

Authentication in ASP.​NET Core for your Web API and Angular2 #57

Open JuergenGutsch opened 5 years ago

JuergenGutsch commented 5 years ago

Written on 22.09.2016 15:47:00

URL: http://asp.net-hacker.rocks/2016/09/22/web-api-authentication-in-aspnetcore-and-angular2.html

JuergenGutsch commented 5 years ago

Comment written by Mojtaba Ghanaatpisheh on 12.10.2016 11:08:16

Perfect post. Kurz un knapp.

JuergenGutsch commented 5 years ago

Comment written by Jürgen Gutsch on 15.10.2016 08:55:13

Thanks :)

JuergenGutsch commented 5 years ago

Comment written by MarcoMengoli on 28.11.2016 17:10:27

Very good post. I have only a question: if someone in the network does overhearing of an http packet sent by an authenticated user, copies the jwtToken and inserts it in one of his packet, isn't he acting as an authenticated user?

JuergenGutsch commented 5 years ago

Comment written by Stu Ratcliffe on 29.11.2016 08:08:25

You should be using TLS for starters, especially as you can now get certificates for free from let's encrypt

JuergenGutsch commented 5 years ago

Comment written by Sean on 06.12.2016 04:42:45

Pointers on social logins?

JuergenGutsch commented 5 years ago

Comment written by Sam Jost on 14.12.2016 17:07:09

For that you might be better off using a package like IdentityServer or 0Auth.

JuergenGutsch commented 5 years ago

Comment written by Sean on 14.12.2016 19:44:34

Uhg. Why? I have some political issues with that. Is it just too messy using the Account controller generated by the Visual Studio WebAPI template? So simple with MVC. :(

JuergenGutsch commented 5 years ago

Comment written by Sam Jost on 15.12.2016 15:48:42

Well, for political issues you are on your own, can't help you there.
And if it is so easy, why do you ask for pointers?

JuergenGutsch commented 5 years ago

Comment written by Sean on 15.12.2016 16:03:04

MVC is easy for social logins. WebAPI is where I'm asking for pointers. Sounds like there's no way to do it, just use Auth0 or IdentityServer. Thanks!

JuergenGutsch commented 5 years ago

Comment written by Asad Sahi on 06.05.2017 19:51:07

@disqus_AsZw3Grx5k:disqus @samjost:disqus I am in search of same simple solution of SPA application to easily get social login integrated. Share if you find any example for that. :)