search

dot-net-zuid / publicwebsite

This is the repository for the new public website of .NET Zuid. All contributions are welcome!
MIT License
1 stars 1 forks source link

Create first technical setup #2

Open dot-net-zuid opened 7 years ago

dot-net-zuid commented 7 years ago

There needs to be an initial technical setup that determines the shape of the solution.

Creations2Be commented 7 years ago

Using Active Directory for storage of user-info (attendee, organizer or admin) would be my first choice. But since this is a public repo - and one would have to be able to code against this AD - I'd suggest separate AD's for DEV and PROD.

dot-net-zuid commented 7 years ago

Agreed, that would be ideal. That would be the case for more assets, like a database, storage or whatever else is needed

rajbos commented 7 years ago

Whats the advantage of using AAD instead of just letting users register with their social accounts? Google/Facebook/Github/etc?

Would we only use it for storage and tack to the AAD Api?

AAD costs for resetting the passwords and 2FA are not cheap and maybe a little though to set up for someone on their first try.

dot-net-zuid commented 7 years ago

Even if you have people authenticate with external accounts like Facebook, Google, etc, you'd need some place to organize their access to the site. We have this at the moment in the database, which is a security risk and not meant for that purpose.

If we use AAD, we can have first-party accounts (actual custom accounts people create for dotnetzuid.nl) and potentially also third-party accounts, although the later is of less priority for now.

Don't worry about the costs for now, we are sponsored by Microsoft for the Azure costs.

dot-net-zuid commented 7 years ago

By the way, if anyone wants to start and create the initial technical setup for the solution, please indicate that you are working on this so that we can assign you to this issue. That way, we'll start out with one setup.

jphellemons commented 7 years ago

I prefer social accounts like @rajbos says. There are good .net Core docs about it and the default template has some identity stuff pre configured. It was discussed in one of the last .net community standups too.

Creations2Be commented 7 years ago

I could have a basic ASP.NET Core Mvc 2.0 website with a basic design (and some content from the current website) up-and-running in a few days. This setup would not support login yet but could be deployed to Azure (or run locally) without any need for a database.

bmaluijb commented 7 years ago

That would be excellent! I’ll make you a contributor, so that you have commit rights.

bmaluijb commented 7 years ago

Hi @Creations2Be, are you working on this? Can I assign you to it?

Creations2Be commented 7 years ago

Yes @bmaluijb, I am... and yes you can.

bmaluijb commented 7 years ago

@Creations2Be Any progress on this one?

Creations2Be commented 7 years ago

Hi @bmaluijb, last few weeks have been pretty hectic but I'll commit my work before the end of the week.

Creations2Be commented 7 years ago

I've had some stability-issues during testing after the latest VS2017 update resulting in some delay of the commit.

bmaluijb commented 7 years ago

Alright, looking forward to your commit!