Click here to Skip to main content
15,884,629 members
Everything / Authorization

Authorization

authorization

Great Reads

by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
by Habibur Rony
This article mainly covers how to setup and configure Azure AD tenant and integrating Azure AD into ASP.NET Core 2.0 web app for authentication and role based authorization.
by Rubén Hinojosa Chapel
Prototype for a plugin architecture based on the Prism Library and the Modern UI for WPF (MUI) toolkit
by DotNetLead.com
Azure AD for authentication and authorization of users for your website

Latest Articles

by Bohdan Stupak
This article describes a super-minimalistic auth endpoint based on AWS Lambda.
by Utku Ozan ÇANKAYA
Basics of improving WCF service quality
by SleepyCrat
How to secure a website using Firebase, Angular 8 and ASP.NET Core 3.1
by DotNetLead.com
Azure AD for authentication and authorization of users for your website

All Articles

Sort by Score

Authorization 

26 Nov 2020 by Aram Tchekrekjian
JWT is a very common and easy way to protect APIs in a standard, URL safe and cross-platform methodology.
1 Aug 2018 by Habibur Rony
This article mainly covers how to setup and configure Azure AD tenant and integrating Azure AD into ASP.NET Core 2.0 web app for authentication and role based authorization.
23 Mar 2016 by Rubén Hinojosa Chapel
Prototype for a plugin architecture based on the Prism Library and the Modern UI for WPF (MUI) toolkit
3 Mar 2018 by Shashangka Shekhar
In this post we are going to secure our NodeJS API’s with customized security token generated by logged user and HTTP actions.
17 Feb 2017 by Mosti16
Use a custom Authorize Attribute which use a own PermissionProvider with custom Permission-Management.
3 Aug 2022 by Bohdan Stupak
This article describes a super-minimalistic auth endpoint based on AWS Lambda.
8 Oct 2019 by Ger Hayden
These notes are based on my experience getting started with IdentityServer4.
24 Jul 2021 by SleepyCrat
How to secure a website using Firebase, Angular 8 and ASP.NET Core 3.1
22 Jan 2023 by Richard Deeming
Your authentication and authorization policies are nothing to do with CSRF. CSRF occurs when an authenticated user on your site visits another site, and that site is able to trick them into issuing a request to your site to perform an action...
13 Apr 2014 by frostcox
Hey I'm just wondering if anyone can help me out. I need to configure my web site to deny all anonymous users apart from one specific user.Web Config WCF Client :string username = "Bob";string...
27 Sep 2014 by Kornfeld Eliyahu Peter
There are endless articles about it - all you need is Google!!!http://msdn.microsoft.com/en-us/library/shz8h065(v=vs.110).aspx[^]http://www.asp.net/web-forms/tutorials/security/roles/role-based-authorization-cs[^]
8 Apr 2016 by Maxim Komlev
Suppression of Browser dialog of Basic Http Authentication and customization
22 Jul 2016 by Richard Deeming
That stored procedure doesn't return any records; it uses the return value instead. This needs to be handled as a parameter:public int CheckIfUserIsInRole(IsUserInRole userInRole){ using (var connection = new SqlConnection(ConfigurationSettings.GetConnectionString())) { ...
5 Apr 2019 by David_Wimbley
Rather than trying to fit a square peg through a round hole, you need to refactor your code to something that will actually work and make sense. Calling controller code from an attribute doesn't make sense. Pull the IsValidUser method out of the Controller B, move it to a class called...
17 Aug 2020 by Sandeep Mewara
Was not aware of it. Looking at Google, seems the possible reason could be Quote: the redirection URI parameter being sent does not match the one registered for your client. It means - when you have created your API key you set the URL redirect...
9 Apr 2024 by Pete O'Hanlon
You probably want to start by reading and implementing authentication using Use ASP.NET forms-based authentication - ASP.NET | Microsoft Learn[^]. To control access to web pages, and folders of pages, use Control authorization permissions in...
18 Feb 2014 by Member 10191513
Please give me answer as soon as possible.I tried Twitterizer in refrence and used this below code:Twitter twt=new twitter("Username","Password");twitterstatuscollection this collection=twt.status.UserTimeLine();But i get Authorization Falied error..
18 Feb 2014 by thatraja
Check their API. https://dev.twitter.com/[^]Browse there for more details. And you could find many jQuery widgets for this. In Codeproject I found this one.Recent tweets[^]
26 Feb 2014 by ravikhoda
HI all,we need to change the default 403 forbidden access page to something else in window authentication. the idea is if user pass window authentication then user will be redirected to admin panel based on the roles. if user do not pass window authentication than it will take user to some...
10 Mar 2014 by Dineshkumar Ramakrishnan
Hi ,I want to create a Menu Control in asp.net, which is placed in the left pane of my UI Screen.I need this menu control with Collapsible and Expand Menu feature, That is,Main Menu-1 Sub Menu-1 Sub Menu-2Main Menu-2 Sub Menu-1 Sub Menu-2 From Above Shown...
15 May 2014 by Tony Hallett
Hi, I have been writing some Pinvoke code for lower level WinAPI Access Control functions. I have a pointer to Privileges associated with my access token from the TOKEN_ACCESS_INFORMATION and I am looking at the privileges. I have working code but decided to refactor part of it to a...
23 Jun 2014 by rickolous
Hey guys, I am trying to solve one of the problems in the authentication section of pentesterlabs but I just can't seem to get it right. In essence, I am trying to use the urllib2 library in python for basic HTTP authentication, however despite providing the correct username and password I keep...
15 Jan 2017 by member33
Hello I was looking for simple example of implementing oauth2 in wcf rest service... all i could find are of with very complex examples.Thank you
18 Aug 2014 by V G S Naidu A
Hi, I need to implement the role based authorization, in my app which working on windows based authentication, and i am using the oracle database. i think membership work with forms authentication and with SQL server database. Here i am getting user names from domain and storing them in...
18 Aug 2014 by -Dr_X-
You should be able to capture the user's unique login SID and store it in Oracle. I do the same for SQL. However, my roles are custom application driven.
27 Sep 2014 by Narendra Singh
Hello I have developed a webpage where i need to upload a image of user . I wrote code for that and tested it on local server. But when i uploaded it on server it giving exceptionSystem.UnauthorizedAccessException: Access to the path 'C:\Inetpub\vhosts\pspl-it.com\site1\projects\SBI -...
27 Sep 2014 by Tadit Dash (ତଡିତ୍ କୁମାର ଦାଶ)
This is due to the permission issue for that folder in server.Please assign proper permission to the folder by going to its properties. Search the issue in Google for more information.
27 Sep 2014 by Torakami
Hii ,asp.net provides asp.net configuration setting where we create role , and there only we need to create usernames and assign theme a role , But here my requirement is well i can create roles in asp.net configuration setting , but i dont want to create any users there as my...
21 Dec 2014 by Telstra
We are using OpenID mechanism to login into our application using third party credentials. For this we have app id and app secret keys. But when we authorize the request we are facing the access token expiration time out error. Can anybody help me how to get the access token value and set its...
12 Apr 2015 by Am Gayathri
How do i use google auth with mvc4 and javascript to redirect to another page with name on successful login ?Am trying to do google sign in on my web application. I could do this using javascript. But i want to redirect to another page on successful login.See below...
19 Apr 2015 by solook1n
Hi, I want to write a server providing oauth2.0, but I meet some problems in generate code and token. is there a good algorithm ? thanks.
19 Apr 2015 by Maciej Los
Have a look here: OAuth 2.0 Generating Token and Secret Token [closed][^]
23 Jun 2015 by Member 10791876
In my asp.net MVC4 Web Application i want to use any functionality through which the users of my web application can logon with their details that are stored in the project database, is their any specific mechanism for this?
23 Jun 2015 by F-ES Sitecore
You can use Identityhttp://www.asp.net/identity[^]When you start a new MVC project in Visual Studio there are a number of authentication options to choose from, so you can have it create a project with this already implemented so you can see how it all works.
26 Jun 2015 by Thanks7872
See this : http://stackoverflow.com/a/6962332[^] or http://geekswithblogs.net/WillSmith/archive/2008/10/14/unauthorized-page-with-forms-authentication.aspx[^]And next time, don't ask 'I want to do this/that' type of question. Try something your self and ask specific questions only.Regards..
8 Jul 2015 by Sir PuruSh
using as like above it's not working but when using as follows is workiung with...
21 Jul 2018 by Nkumary
I Have used Passport-Google-OAuth in Node.js web service project. I am using OAuth2Strategy.The process i have used is i call the web service method to authenticate user from his Gmail account. Initially i serve the Raw HTMl which i receive from calling the Passport-google-OAuth. Which works...
8 Sep 2015 by Jithin Geroge
Windows universal app on developing asking for addition login with below message and waring. How to solve this ? I am using web api claims authorization for security login.Message : The server localhost is asking for your username and password.The server reports that is from...
6 Oct 2015 by RAHUL(10217975)
Hello All,I want to integrate SSO for Client. Client requires SSO (Windows Active Directory) using trust based connections. They might have multiple servers with domain/users. Any domain user of different server can access the WebApplication through SSO. I am new to this concept. I am...
25 Nov 2015 by Venkata Durga Rao
My application is working fine on my system but while deploying on server(having load balancer).After signin into application some pages are open fine after navigating into some time after a while it going to startup.auth.cs and it going to never ending redirects.
20 Jan 2016 by Indrajith Reddy
How do I trigger action filters placed to sub methods which I am calling from the directly requested action method ?In the below example SubmitViolation method will be requested from view and based on operation type I am calling other methods. I need to check the authorize permissions based...
3 Feb 2016 by Member 12304977
I'm trying to save some informations into a file in the ApplicationData.Current.LocalFolder this way:private async Task WriteRecentScores(List list) { try { var serializer = new DataContractJsonSerializer(typeof(List)); ...
22 Jul 2016 by Gooran
Hi. I need to call aspnet_UsersInRoles_IsUserInRole from Aspnet Membership.Im making dapper call like this:Best Regards.What I have tried:public int CheckIfUserIsInRole(IsUserInRole userInRole) { using (var connection = new...
5 Aug 2016 by Deepak Jena
I have a working WebApi project where I need to add authentication and authorization. We have a User Database to verify login credentials. I am not sure how to start with implementing authentication in WebApi.I have went through the solution, understood the HMAC authentication completely...
5 Aug 2016 by prateekfgiet
please refer Web APIs-Basic Authentication and Token based custom Authorization[^]
5 Jan 2017 by Sem Shekhovtsov
This article describes how to integrate Azure AD OAuth2 authentication method into .Net Core 1.0 (MVC) web application. The OAuth2 authentication method is required for using Microsoft Graph API services in particular.
15 Jan 2017 by Pritesh Gadhiya
Hello Sir/Madam, Any solution for OAuth 2.0 in wcf rest service?
14 Mar 2017 by Troy Bryant
I'm looking and struggling to find a way to pass authorization headers. My error is 405 Method not allowed Response for preflight has invalid HTTP status code 405. Struggling on how to pass that bearer token.Here is my...
6 Jan 2019 by Cas Dijkstra
Hi, I'm planning to write a few api's to improve my programming knowledge. But as a starter I'm thinking about authentication. I've been searching for a solution, but I'm wondering if there are better options. What I want to achieve is to have a AuthenticationAPI which handles the...
3 Oct 2017 by SaeedPol
I want to protect just the Admin page of my site but my code protects all pages. What changes should I make to my code? What I have tried: system.web>
3 Oct 2017 by Richard Deeming
To specify configuration which only applies to a specific file, use the element: location Element (ASP.NET Settings Schema)[^] ... ...
28 Nov 2017 by Uwakpeter
I have a project i built using MVC, i want to able to access the application via adfs authentication, i have read a couple of stuffs on how to achieve this but no joy yet! having this error: •Activity ID: 00000000-0000-0000-b5cc-0480020000eb •Error time: Tue, 28 Nov 2017 16:33:28 GMT •Cookie:...
22 Apr 2018 by Member 8773837
I had a site running in IIS 7.5 for more than a year now. It uses Windows Authentication..It was running fine until the server in which it was hosted was rebooted for a Windows update recently. After that in order to access the site an user has to be part of the Server Admin group or has to...
24 Apr 2018 by Dave Kreskowiak
Only if the site hosting your software supports it. Truthfully, one "one-time" code is useless. If the download fails or is interrupted for some reason, the user has to go get another code. It would be better to generate a login account and password for the user instead.
24 Apr 2018 by Patrice T
Quote: I was wondering if there is a way to generate a one time only passcode to enable a software download from a fileaharing website, for a software that I will be posting? "a one time only passcode to enable a software download" is the wrong place to put protection. A better choice is to use...
17 May 2018 by Chillin92
Currently, my project is using Hmac-SHA256 to do the authorization in APIM. We are struggle with how to generate, transmit and store the secret key between client side and ours. Is there any secure way to do this? What I have tried: For now, we are generating the secret key through openssl...
5 Nov 2018 by 1suli0
Well, after a few hours of googling, I still can't find an answer, not even partial one. Is this even possible, or it must be custom solution? What I have tried: I've played around with locked out feature of Identity, but it seems, that is not the answer, because in that scenario user is...
5 Nov 2018 by MadMyche
Welcome to the club of people looking for permanently disabling a user. We have used different versions of Identity going back about a decade, the method we ended up with was going custom; adding a AccountLocked [bit] field to the db schema. We do have an Admin interface to manage all of the...
6 Jan 2019 by Aydin Homay
IdentityService is the best solution so far I know because it allows you to make service to service authentication and service to consumer authenitcation. I have used it in serveral projects successfully and got a good results.
5 Feb 2019 by preetam kumar
I am looking to design application it will not have login page but it will get the email address from UserPrincipal.Current.EmailAddress. I need to validate the email address with the table in the database. Table name Users. and need to check the authentication level from userPermission Table....
5 Feb 2019 by Maciej Los
Use Google![^]. There's a lot of examples, i.e.: ASP.NET Core MVC - Authentication And Role Based Authorization With ASP.NET Core Identity[^] Custom Authentication and Authorization in Asp.Net Core 2.0[^] and much more!
13 Feb 2020 by Jonny Mai
so my exam is soon and I'm stumbling upon a confusing matter regarding passport, I am using express back-end and a "database"(just a map where key is the username and value is just a javascript object with the rest of the information) and I'm...
19 Apr 2020 by Member 13081540
am working with Microsoft.AspNetCore.Identity.UserManager and I'm trying to mock the creation of a new user. In fact, it does create a new user with username, email etc. but the password hash property is still null. This is how I set up mock...
19 Apr 2020 by Garth J Lancaster
Are you under the premise the PasswordHasher should be automatically called ? I did some research and wasn't convinced - I would have thought you'd need ApplicationUser user = _userManager.Users...; user.PasswordHash =...
17 Aug 2020 by Member 11072126
Hi All, I am trying to implement login functionality using the package: angular-auth-oidc-client for Angular 10 project. I have gone through the documentation and have configured service but getting the error: Message: redirect_uri_mismatch...
13 Oct 2020 by sasko1
Hi! I have modal boostrap div that is called by action on button click. I want to be able to redirect user to login div when user tries to perform action he is not authorised to do. Can you give me some good resource so i could try to figure it...
13 Oct 2020 by Sandeep Mewara
Believe following is what you are trying, a CP article: Use Twitter Bootstrap Modal Dialog for Smoother Login Experience[^]
16 Nov 2020 by Reza kavian
i use an asp.net core 2.2 project that send request to another project(web api),if i want to add identity (with rigth click to project and add identity), I have to do this in my own project or in the api project. if add identity in api...
16 Nov 2020 by Vincent Maverick Durano
The official documentation provides a ton of information for you to get started about it. Here you go: Create an ASP.NET Core app with user data protected by authorization | Microsoft Docs[^] Here's another useful article that you can refer to:...
28 Feb 2022 by Utku Ozan ÇANKAYA
Basics of improving WCF service quality
28 May 2021 by Robert Woodard
I have not had a lot of experience with DotNet Core. We have created a Portal for our users utilizing DotNet Core 3.1. I am just throwing this out there to get ideas on how to handle this if it is possible: In the portal we have a View where...
26 Feb 2022 by Kiddo 2022
import React, { createContext, useContext, useEffect, useState } from 'react' import { Text } from 'react-native'; import * as Google from "expo-google-app-auth"; import { GoogleAuthProvider, onAuthStateChanged, signInWithCredential, ...
22 Jan 2023 by GKP1992
Hello, We have a .NET core web application where we add and authentication scheme that creates an authentication ticket with claims identity. services.AddAuthentication(options => { options.DefaultScheme ...
12 Jul 2016 by brzydkimech
Hi guys. I have a problem with windows authentication in ASP.NET. Maybe the soludtion is easy but I've stacked in one place and I can't move forward. Let me describe my problem. Even though I've placed all required configuration in web.config (I think I put all of them). ...
16 Feb 2015 by John Atten
Identity is fully compatible with the OWIN Authorization model, and when used in this manner, represents a very useful, ready-to go concrete implementation.
18 Sep 2016 by Zijian
Real world WCF project structure, Authentication and Authorization
26 Aug 2014 by Pramod Sharma Tech
Securing routes in Angular is not available out of the box. This tip would help in securing routes in Angular based applications.
10 Oct 2019 by Joseph Rozario
This article explains how to implement Token Authentication and Authorization using JWT in ASP.NET CORE.
27 Mar 2014 by Sergey Nizhegorodtsev
The article explains step-by-step how to start programming using cryptocurrency API for Bitcoin, Litecoin, CrimeaCoin, etc. The working example has been written for Crimeacoin.
1 Nov 2015 by Neohuman Software
How to: Using ASP.NET Identity using Azure Storage Tables
16 Aug 2016 by Olubisi Akintunde
Application Managed Authorisation using Dependency Injection and Interception
12 Aug 2016 by Manoj Reddy Ch
Securing BizTalk WCF Receive Locations with SSL and Client certificate authentication and authorization.
11 Jun 2019 by Shweta Lodha
This article will walk you through the creation of ASP.NET Core application using ASP.NET Core 2.2 from scratch, by utilizing the capabilities of package manager, EF Core, Identity API, Razor Class Library, etc.
3 Dec 2014 by Assil
This post demonstrates the simplest use of OWIN with ASP.NET. It will not teach you OWIN nor Claim-based auth, nor design or security.
11 Jul 2016 by satya inumarthi
Here I explain how to create custom authentication and mapping it to the default filters like Authorize, roles..etc
14 Jun 2014 by ziad imad
Hi,there is a simple way I used:1- create users table which contain:user_id,user_name,password,role_id,......2- create login spcreate procedure login@user_name nvarchar(50),@password nvarchar(50)asselect * from userswhere user_id=@user_idand password=@password3-...
13 Jan 2018 by satya inumarthi
In this article I am going to explain how we can implement Authentication and Authorization in Web, WebApi as well as for other clients.
22 May 2015 by debashishPaul
Implementation of basic role based authorization in ASP.NET MVC5 with ASP.NET Identity 2.0
26 Feb 2014 by KumarSundeep
Found a useful article on microsoft's site. Hope this will solve your problem.http://support.microsoft.com/kb/306355[^]
3 Sep 2019 by Afzaal Ahmad Zeeshan
Quote: The authorization server has a login-screen which will be used to authenticate users. The scenario I faced is, I need to use a common login-screen so that I login into the application that is already functioning? It seems as if you are trying to implement OAuth. Which means, that you want...
8 Apr 2024 by Member 16239575
Hello, I want to do user-based page authorization with asp.net web forms. What I want to do is to take the role of the user while logging in from the users table in the database and control which pages he can access there, for example, let the...
29 Sep 2016 by OriginalGriff
Never, ever, accept code from a insecure website to handle anything to do with real money.You do not know who is giving you the code, you do not know what it does, you do not know that it places the monies correctly into the appropriate account, without passing the details to any third...
3 Sep 2019 by Yonathan1111
Dears, How to authenticate and authorize an application that is already developed using asp.net mvc and extjs using the identityserver4? The authorization server has a login-screen which will be used to authenticate users. The scenario I faced is, I need to use a common login-screen so that I...
14 Jun 2014 by tahirgr8_2000
Dear Experts,I have following filesDisplay.aspx- Main File to displayWorkingsheet.Aspx- Working sheet which navigate from display.aspx Now whenever i submit button in Display.aspx, it will redirected to workingsheets.aspx.BUTBut i want to ask user credential from user with form...
24 Jun 2014 by tahirgr8_2000
Dear Freindsi have used someone else code and modified according to my need. It works and run smoothly. here login name and password authenticate with window domain as we used our login id and password for login. Now after successful running of this code, I have one issue that How to...
1 Jun 2016 by Member 12559354
Hello,I've created a Web API 2 Project and set its authentication to No Authentication.Now, I want to change the authentication from No Authentication to Individual User AccountsHow can I do that?Thanks,Yashasvi JadavWhat I have tried:I have tried it by installing...
15 Jul 2016 by Vignesh Mani
Windows authentication in asp.net Part 87 - YouTube[^]Hi friend above link help to solve your problem
11 Aug 2016 by sencsk
var client = new AuthyClient(goodApiKey, true);check the parameter for test or prod.