Monthly Archives: October 2015

IdentityServer3 Logging & Monitoring using Serilog and Seq

Posted on October 22, 2015 by Dominick Baier

IdentityServer has two fundamental “monitoring” facilities : development-time logging and production-time eventing. The original docs are here. Logging is for developers – in fact – when I start a new IdentityServer3 project, that’s the first thing I configure. For security reasons (and … Continue reading →

Posted in .NET Security, ASP.NET, IdentityServer, OAuth, OpenID Connect, OWIN, WebAPI | 8 Comments

The State of Security in ASP.NET 5 and MVC 6: Authorization

Posted on October 12, 2015 by Dominick Baier

The hardest part in designing an application is authorization. The requirements are always so app-specific that for 10 applications you often see 12 different implementations. To make things worse, ASP.NET and MVC traditionally had not much more built-in to offer than … Continue reading →

Posted in .NET Security, ASP.NET, WebAPI | 42 Comments