Category Archives: Uncategorized

OWIN Authentication Middleware for Hawk in Thinktecture.IdentityModel.45

Originally posted on Badrinarayanan Lakshmiraghavan's Blog:
This is continuation of my previous post Basic Authentication with ASP.NET Web API Using OWIN Middleware, where I implemented HTTP basic authentication in a custom OWIN middleware class AuthenticationMiddleware that derives from the…

Posted in Uncategorized | Leave a comment

Announcing MembershipReboot

Originally posted on brockallen:
It’s sort of silly that I’m doing an announcement now since MembershipReboot is at version 2.1 (my first release was in January, 2013), but since I never made a formal post on it, this will have…

Posted in Uncategorized | Leave a comment

Building a federated authentication client with OpenID Connect

Originally posted on brockallen:
Dominick and I have been working hard at implementing OpenID Connect in Thinktecture IdentityServer. Dominick has recently completed the authorization server and user profile endpoint bits. We also just recently completed a sample for a basic…

Posted in Uncategorized | Leave a comment

Hawk Authentication for ASP.NET Web API using Thinktecture.IdentityModel.45

Originally posted on Badrinarayanan Lakshmiraghavan's Blog:
Hawk is a MAC-based HTTP authentication scheme that provides partial cryptographic verification of HTTP messages. Hawk requires a symmetric key to be shared between the client and the server out-of-band. For more info,…

Posted in Uncategorized | 1 Comment

Hawk Authentication for ASP.NET Web API using Thinktecture.IdentityModel.45 – Response Payload Verification

Originally posted on Badrinarayanan Lakshmiraghavan's Blog:
This is continuation of my earlier post on implementing Hawk authentication for ASP.NET Web API using Thinktecture.IdentityModel.45. One of the primary design goals of the Hawk scheme is to “simplify and improve HTTP…

Posted in Uncategorized | Leave a comment

Preventing clickjacking using Thinktecture IdentityModel

Originally posted on brockallen:
I don’t know why it’s taken me this long to add anti-clickjacking support, but I finally needed it myself today so I added it to Thinktecture IdentityModel. If you’re not familiar with clickjacking, it’s an attack…

Posted in Uncategorized | Leave a comment

New Course: Introduction to OAuth2, OpenID Connect and JSON Web Tokens (JWT)

Posted in Uncategorized | Leave a comment

Configuration for WIF session helper APIs in Thinktecture IdentityModel

Originally posted on brockallen:
I just added a custom configuration section in Thinktecture IdentityModel that will automatically drive the various SAM and FAM helper functions I added a while ago. The configuration looks something like this: <configuration>   <configSections>    …

Posted in Uncategorized | Leave a comment

ASP.NET Web API Authentication: Using multiple (simultaneous) Authentication Methods with Thinktecture AuthenticationHandler

Since day one it was possible to support multiple authentication methods with AuthenticationHandler (see here, here and here for some background). I simply stopped searching for other credentials once I found one of the registered ones. Since one of my … Continue reading

Posted in IdentityModel, Uncategorized, WebAPI | Leave a comment

LeastPrivilege on Flipboard

Curated content seems to be the new thing, here’s mine: http://flip.it/C9sav

Posted in Uncategorized | Leave a comment