Monthly Archives: March 2012

Identity in .NET 4.5–Part 1: Status Quo (Beta 1)

Posted on March 16, 2012 by Dominick Baier

.NET 4.5 is a big release for claims-based identity. WIF becomes part of the base class library and structural classes like Claim, ClaimsPrincipal and ClaimsIdentity even go straight into mscorlib. You will be able to access all WIF functionality now … Continue reading →

Posted in .NET Security, IdentityModel | Leave a comment

ASP.NET WebAPI Security 5: JavaScript Clients

Posted on March 15, 2012 by Dominick Baier

All samples I showed in my last post were in C#. Christian contributed another client sample in some strange language that is supposed to work well in browsers ;) JavaScript client scenariosThere are two fundamental scenarios when it comes to … Continue reading →

Posted in IdentityModel, WebAPI | 6 Comments

ASP.NET WebAPI Security 4: Examples for various Authentication Scenarios

Posted on March 14, 2012 by Dominick Baier

The Thinktecture.IdentityModel.Http repository includes a number of samples for the various authentication scenarios. All the clients follow a basic pattern: Acquire client credential (a single token, multiple tokens, username/password). Call Service. The service simply enumerates the claims it finds on … Continue reading →

Posted in IdentityModel, WebAPI | 8 Comments

ASP.NET WebAPI Security 3: Extensible Authentication Framework

Posted on March 13, 2012 by Dominick Baier

In my last post, I described the identity architecture of ASP.NET Web API. The short version was, that Web API (beta 1) does not really have an authentication system on its own, but inherits the client security context from its … Continue reading →

Posted in IdentityModel, WebAPI | 4 Comments

ASP.NET WebAPI Security 2: Identity Architecture

Posted on March 8, 2012 by Dominick Baier

Pedro has beaten me to the punch with a detailed post (and diagram) about the WebAPI hosting architecture. So go read his post first, then come back so we can have a closer look at what that means for security. … Continue reading →

Posted in IdentityModel, WebAPI | Leave a comment

ASP.NET WebAPI Security 1: Introducing Thinktecture.IdentityModel.Http

Posted on March 7, 2012 by Dominick Baier

Over the course of the next posts I will describe the security options you have when writing services using the new ASP.NET WebAPI. Before I start digging into the gory details, all the sample code and concepts I will show … Continue reading →

Posted in IdentityModel, WebAPI | 7 Comments

Thinktecture.IdentityModel.* on GitHub

Posted on March 6, 2012 by Dominick Baier

I uploaded Thinkecture.IdentityModel (core) and Thinktecture.IdentityModel.Web (WCF Web Programing Model) to github. I thought that’s the easiest to make the source code available, especially for the stuff that is work in progress.

Posted in IdentityModel | Leave a comment