search

skoruba / IdentityServer4.Admin

The administration for the IdentityServer4 and Asp.Net Core Identity
MIT License
3.56k stars 1.15k forks source link

Hardening Guides? #659

Open adeelansari opened 4 years ago

adeelansari commented 4 years ago

Question

Are there hardening guide or checklist available which can be used for production deployment?

carlblanchard commented 4 years ago

I would be very interested in seeing this guide!!!

skoruba commented 4 years ago

Not yet 😊 I will send some guide later, after next release. In the meantime you can check some another guides how to setup IS4 for production and .NET Core app as well. 👍

adeelansari commented 4 years ago

I guess all the best practices of .NET app would apply, but are there any mechanism built in the STS side that would black-list an IP after so many failed authentication attempts?

Would love to help out to prepare hardening guide etc. if needed.

skoruba commented 4 years ago

I do not use any implementation for black-listing of IP addresses. 😊 For sure, please if you can - send a PR with your suggestions or steps how to setup the main parts for production deployment. Thank 👍🏼