|
We have existing two MVC applications and an Angular JS application with individual user accounts using Forms authentication. I have been asked to implement a single sign on mechanism using ASP.Net Identity. I'm very much new these concepts. Kindly help me with this implementation. Thanks in advance.
|
|
|
|
|
Ask old accounts to upgrade their details using the new system. Otherwise use the details provided in database etc. to create their new accounts on new system; ASP.NET Identity.
Asking users will be simple, as you can ask them to re enter the password so that new password policies can be met. Secondly, maybe new system requires a two-way authentication, or email verification and you can do so when they create a new account themselves after trying to login to their accounts using old email.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
Hi Afzaal,
Thanks for your reply.
Can you please guide me through the implementation. It's very urgent.
|
|
|
|
|
|
If it's very urgent then google for solutions rather than waiting for people on here to respond as there is a high chance they'll just be googling solutions for you anyway. Identity and SSO are both well documented concepts so there is plenty out there to find.
|
|
|
|
|
Hello,
I develop a web application and I want to print an invoice from this application from button called "Print".
My Question is: How to print the invoice on the local device printer (On client side) and without show the print dialog (Print directly to default printer on the Client device).
Thanks All
|
|
|
|
|
You can't; printing on the client system is controlled by the client user. Browsers do not have direct access to local resources.
|
|
|
|
|
This question has been discussed bazillion times previously. The answer is always a No. That is because browser doesn't let web applications to communicate with local devices as they may use resources, such as paper, ink and energy in this case. Browsers always ask the users to intervene and grant permissions.
Even if you only mean to print one page, who knows next web app might want to print 25, 100 perhaps? It is better to allow users to print this because if they already need that resource printed they would love to click on print button anyway.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
Would you want websites sending things to your printer without asking you?
|
|
|
|
|
You don't. As you were told last week[^].
The answer hasn't changed in the last six days.
If you want to print something on the user's printer, you use window.print(), and you live with whatever UI the user's browser shows them.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
What is the method of IPN method for Paypal GET? or POST?
|
|
|
|
|
|
Read here, Introducing IPN - PayPal Developer[^].
GET and POST are merely HTTP verbs for communication, and it depends on the client that you are using + what you are doing; uploading or downloading etc.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
i have few basic questions on mvc6.
1) i do not know anything about mvc6. so tell me mvc6 means asp.net core ?
2) can we start working with MVC 6 with VS2013 ? if possible then tell me how to start mvc6 project with VS2013 ?
3) if MVC6 does not mean asp.net core then what is the difference between mvc 6 and asp.net core ?
thanks
tbhattacharjee
|
|
|
|
|
|
I know a little about MVC core. VS2015 requires that you load the core packages in order to work with core, at least last time I checked back in Feb 2016. Then you need a core server that can be linux or windows in order to serve a core app and debug it.
Core apps need to be written as core apps, and is different than MVC apps.
I was still new to MVC, on my 3rd app, so I started a core app, but decided to abandon it and stick to MVC 6 for now until I speed up my skill level at it.
Maybe next year I'll give core another shot.
Globalism is Socialism on a planetary scale.
|
|
|
|
|
Tridip Bhattacharjee wrote: 1) i do not know anything about mvc6. so tell me mvc6 means asp.net core ?
ASP.NET MVC6 is the birth of the unified framework (the merge of Web API and MVC Controllers). It was first introduced when ASP.NET 5 was born. Now, ASP.NET 5 was renamed[^] to ASP.NET Core, and the new MVC6 is now called ASP.NET Core MVC.
Check out the following articles:
Introducing ASP.NET Core: The New ASP.NET in Town![^]
ASP.NET Core: Getting Started with ASP.NET MVC Core[^]
Tridip Bhattacharjee wrote: 2) can we start working with MVC 6 with VS2013 ? if possible then tell me how to start mvc6 project with VS2013 ?
You would probably need Visual Studio 2015 to work with that. You could also use the Community edition of VS to test out ASP.NET Core/MVC6.
Tridip Bhattacharjee wrote: 3) if MVC6 does not mean asp.net core then what is the difference between mvc 6 and asp.net core ?
Refer my answer above.
PS: To get more information, I would suggest you to do a quick search at google.
|
|
|
|
|
i read few articles like how to secure web api. they are saying client and server will share some secret key . client will create a has value of secret key and send it to web api always when calling web api action. web api action will create a hash value of secret key and compare that value against client sent has value. if match then client will allow to call web api action.
suppose a attacker can capture the client request and send the same hash data to web api then how could we protect this ?
from some where i found this below trick to protect it. they said
1) requests with different Date header values will have different signatures, thus attacker will not be able to modify the timestamp
we will generate hash based on secret key then how date comes to scene ? this points is not clear to me.
2) we introduce a requirement that no http request can be older than X [eg. 5] minutes - if for any reason the message is delayed for more than that it will have to be resent with a refreshed timestamp.
point two is not clear. what this area try to mean delayed for more than that it will have to be resent with a refreshed timestamp. when client will send first request and then client may send second request after 10/15 minute later.
please help me to understand how to protect web api when using HMAC hasing against Replay attack. anyone can explain it nice like how to protect web api with HMAC hashing thanks
tbhattacharjee
|
|
|
|
|
Tridip Bhattacharjee wrote: 1) requests with different Date header values will have different signatures, thus attacker will not be able to modify the timestamp
we will generate hash based on secret key then how date comes to scene ? this points is not clear to me.
1) Use the current date as a factor in the hash function that generates your MAC. This is used so that the hash can be appropriately re-created using the time stamp on the packet, and rejected if it doesn't match.
Tridip Bhattacharjee wrote: 2) we introduce a requirement that no http request can be older than X [eg. 5] minutes - if for any reason the message is delayed for more than that it will have to be resent with a refreshed timestamp.
point two is not clear. what this area try to mean delayed for more than that it will have to be resent with a refreshed timestamp. when client will send first request and then client may send second request after 10/15 minute later.
2) Not sure how this isn't clear. Honestly, 5 minutes over the wire is pretty forgiving. In your example, the second request will have a new time stamp. We're talking about packets here, not sessions.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
you said : 2) Not sure how this isn't clear. Honestly, 5 minutes over the wire is pretty forgiving. In your example, the second request will have a new time stamp. We're talking about packets here, not sessions.
suppose my first call happen at 9 AM and second call will happen after 10 AM. so gap can be long between two call. so what happen if request come from valid client with huge time gap between two call.
let me know. thanks
tbhattacharjee
|
|
|
|
|
No, not at all what's being talked about here.
A request is sent from a browser to your WebAPI at 0900. If that exact request, with a time stamp of 0900, is received by the server at 0906 or later, it get's rejected. This is to prevent that exact same request from being replayed at a later time, which is exactly what you're trying to defend against.
You send a second request at 1000. Providing that request is received by your server by 1005, everything is fine. It has no relation at all to the previous request, which is part of the definition of a RESTful service (which WebAPI implements).
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
The web service is deployed to IIS (it runs fine when I test which runs a temp iisexpress hosted session via debug menu) and then I try to access the URL for the service and get the following error:
HTTP Error 500.19 - Internal Server Error
The requested page cannot be accessed because the related configuration data for the page is invalid.
Detailed Error Info:
Moduele IIS Web Core
Notification BeginRequest
Handler Not yet determined
Error Code 0x80070021
Coding error This configuration file section cannot be used at this path. This happens when the section is locked at a parent level. Locking is either by default (overrideModeDefault="Deny"), or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false".
Config file \\?\C:\inetpub\wwwroot\WCFService1\web.config
Requested URL http://localhost:80/WCFService1/
Physical Path C:\inetpub\wwwroot\WCFService1\
Logon Method Not yet determined
Logon User Not yet determined
The web.config file is:
<configuration>
<system.web>
<compilation targetframework="4.0">
<system.servicemodel>
<behaviors>
<servicebehaviors>
<behavior>
<servicemetadata httpgetenabled="true">
<servicedebug includeexceptiondetailinfaults="false">
<servicehostingenvironment multiplesitebindingsenabled="true">
<system.webserver>
<modules runallmanagedmodulesforallrequests="true">
<directorybrowse enabled="true">
I went according to the “publish” wizard from the “build” menu. And I created the profile for deployment and the deployment said success. So I am not sure what I need to do additionally or correct. I also am concerned I do not see any endpoints listed in the web.config file. I plead ignorance since this is WCF and I am not sure what happens behind the scenes.
Thanks in advance,
-Scott Kay
"Matthews... we're getting another one of those strange 'aw blah ess spa nol' sounds from dolphin number three?"
modified 29-Nov-16 14:44pm.
|
|
|
|
|
Successful deployment does not guarantee successful running and performance of the code. It deployed code, which means your application is live. It doesn't run, it means it requires some tweaking.
Of course, this problem means that development machine and hosting machine are entirely (or somewhat) configured differently. So, check the settings in order to run the applicatio. In many cases, you are just hiding a feature from application, or there is a lock that prevents it to perform.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
|
Does anyone know how to create a signature form in asp.net where a person signs in a blank space and then saves the signature and then it sends an email to another person to approve.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
