Identity

Reusable codes for OAuth security in business applications

Share Identity Bearer Tokens among Distributed ASP.NET Core Web APIs

Earlier this year we looked at Implementing Group-Based Permissions Management using the ASP.NET Identity 1.0 framework. The objective of that project was to gain a little more granular control of application authorization, by treating the now-familiar Identity Role as more of a "permission" which c

In recent posts, I've covered a lot of ground using ASP.NET Identity 2.0 in the context of an MVC application. Since it's RTM in March of this year, Identity 2.0 has offered a substantial expansion of the Authentication/Authorization . toolset available to MVC applications. Similarly, Identity 2.0

The Importance of Secure Authentication in Web Applications and the Role of Identity Providers