posted on June 24, 2016 by long2know in ASP.NET, Entity Framework, Security
My current single-sign server, that utilizes OWIN, does not store information regarding users’ identity. On the back-end, it makes LDAP queries to Active Directory to authenticate users and then makes additional LDAP queries to determine roles and authorization.
Since I’ve been playing with Azure lately, I wanted to re-tool this solution to allow toggling between a data-store for user identity information and Active Directory.
posted on June 18, 2016 by long2know in ASP.NET, Security
If you recall my previous post on ASP.NET Anti-forgery configuration options, you may be familiar with the way the ASP.NET MVC AntiForgeryToken helper adds the “x-frame-options SAMEORIGIN” header to server responses. This header prevents different domains from displaying your site in an iframe. Your only option to manage this feature is to completely disable it.
An all or nothing approach to configuration is quite inflexible. Additionally, if we are using the web.config to handle our configuration, that too is pretty rigid and hard to manage.
posted on May 26, 2016 by long2know in angularjs, codepen, JavaScript, plunker
I was playing around with my trusty multi-select dropdown earlier today and a colleague of mine pointed out that changing the selected items outside of the directive would not actually deselect previously selected items. This was a curious bug since I knew I had a watcher on the ngModel selections.
posted on May 13, 2016 by long2know in angular, JavaScript
Yesterday, I was fixing up a web view/page that contained nested Angular ui-router states to achieve parent/child detail. Interestingly, I discovered I was doing things the hard way.
posted on May 5, 2016 by long2know in ASP.NET, Ninject
Today I ran into an interesting issue. I have a process that uses many database Repositories that are intended to share a DbContext. This is necessary due to a reliance, and desire to use, Entity Framework’s state tracking.
However, once I moved away from working entirely from an HttpContext scope, my Ninject bindings failed me.
posted on May 2, 2016 by long2know in ASP.NET, OWIN, Security
If you’ll recall a previous post in which I examined decrypting the OWIN AuthenticationTicket, I didn’t really examine how to deal with the ticket in the context of cookies.
posted on April 21, 2016 by long2know in angular, JavaScript
Quite a while back, I wrote a blog post that detailed how it’s possible to use a directive to determine when an Angular repeater is finished. My solution, like nearly every other solution I looked at has one major flaw. It’s only triggered on first render.
posted on April 9, 2016 by long2know in angular, JavaScript
Last year, I provided a brief synopsis of a project structure and conventions that i use with Angular.
Over the course of a year though, this structure has evolved.
posted on April 6, 2016 by long2know in angular, ASP.NET, JavaScript
Often, web applications aren’t deployed to the root path of a web server. Also, often, developers (me included) develop applications with the intent of deploying to the root path.
Overcoming this problem with an Angular app, while also making a local build against IIS Express and a production deploy work, is relatively straight forward.
posted on April 4, 2016 by long2know in angular, JavaScript
With a current application project in which I’m using Angular’s built-in currency filter, the value, when negative, was properly enclosed in parenthesis.
However, an Angular update (to v1.5) changed this behavior.
