After using OWIN for months for basic OAuth authentication, it’s apparent that Microsoft is abandoning OWIN . This isn’t necessarily a bad thing. .NET Core is built on a similar structure as that which was implemented in OWIN. Essentially, we have a familiar middleware pipeline.
ASP.NET Core OAuth Middleware
posted on July 11, 2016 by long2know in ASP.NET, Core, Microsoft, Middleware, Security
Consuming a SOAP service using HttpClient
posted on July 7, 2016 by long2know in ASP.NET
Some of Microsoft’s built-in code generation/tooling is really janky. One such example is the code generator that will produce service references and proxy classes from a SOAP WSDL definition. I’ve never liked this particular feature of Visual Studio. The service classes themselves don’t play nicely with injection, behave strangely with instantiation, scoping, singleton patterns, and are generally so .NET 1.1…
Porting EF6 to EF7 or EF Core
posted on July 6, 2016 by long2know in ASP.NET, Core, Entity Framework
Since my foray into utilizing .NET Core to port an older CRUD app using Angular 1.x and Entity Framework 6.x, my first stumbling block is dealing with breaking changes between EF 6.x and newer versions of EF.
Creating an Angular2 app with VS2015
posted on July 6, 2016 by long2know in angular, ASP.NET, Core
Last night, I was playing with the latest .NET Core tooling in Visual Studio 2015 and decided to create an Anuglar2 application. It is not a straight-forward process. Additionally, most tutorials that you will see floating around don’t deal with Angular2 RC4 (v.Latest). And the few that do either aren’t Visual Studio 2015 specific or aren’t targeting ES5 as required by IE11 or older.
Integrating with ASP.NET Identity’s Schema
posted on June 24, 2016 by long2know in ASP.NET, Entity Framework, Security
My current single-sign server, that utilizes OWIN, does not store information regarding users’ identity. On the back-end, it makes LDAP queries to Active Directory to authenticate users and then makes additional LDAP queries to determine roles and authorization.
Since I’ve been playing with Azure lately, I wanted to re-tool this solution to allow toggling between a data-store for user identity information and Active Directory.
ASP.NET Anti-forgery XFrame Options
posted on June 18, 2016 by long2know in ASP.NET, Security
If you recall my previous post on ASP.NET Anti-forgery configuration options, you may be familiar with the way the ASP.NET MVC AntiForgeryToken helper adds the “x-frame-options SAMEORIGIN” header to server responses. This header prevents different domains from displaying your site in an iframe. Your only option to manage this feature is to completely disable it.
An all or nothing approach to configuration is quite inflexible. Additionally, if we are using the web.config to handle our configuration, that too is pretty rigid and hard to manage.
Entity Framework blocking stored procedures
posted on June 16, 2016 by long2know in ASP.NET, Database, Entity Framework
I’ve written a number of posts detailing running and working with stored procedures in Entity Framework 6.x. Yesterday, I ran into a weird issue.
Create an Excel template from objects
posted on June 8, 2016 by long2know in ASP.NET, Microsoft
Previously, I wrote about parsing an Excel spreadsheet to a list of objects. This is a pretty useful technique, but what do you do if you want to provide the user with an Excel template to get started? Being able to provide them with an initial template based on your object model is a good starting point.
Parsing Excel to a List of Objects
posted on May 25, 2016 by long2know in ASP.NET, Microsoft
Business people love their Excel spreadsheets. Fact. As such, I work with Excel a lot to parse and manipulate data. However, from a .NET perspective, Excel in its raw form isn’t overly useful. Being able to take an Excel worksheet and build a List<T> can be extremely useful.
Extracting Bearer Token from OWIN Cookie
posted on May 2, 2016 by long2know in ASP.NET, OWIN, Security
If you’ll recall a previous post in which I examined decrypting the OWIN AuthenticationTicket, I didn’t really examine how to deal with the ticket in the context of cookies.