/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 brockallen.com
Host authentication and Web API with OWIN and active vs. passive authentication middleware | brockallen
| | www.codeproject.com
ASP.NET Interview Questions and Answers on JWT Token Security- CodeProject
3.0 parsecs away

Travel
| | In this article, we break down some most asked interview questions on Security part in ASP.NET MVC.
| | www.rasikjain.com
Security - Authentication Workflows
3.0 parsecs away

Travel
| | Here are three scenarios for implementing authentication workflows. Internet Applications (Public facing) For internet web applications and APIs, Session based (SessionID cookie) and Token Based (JWT) Authentication can be implemented. Session Based: Implemented for a majority of traditional and stateful web applications. Once the user is authenticated, A Session state is created and stored in an external State server or SQL database. The Session state is identified by a unique SessionID....
| | www.sjoerdlangkemper.nl
Preventing CSRF with the same-site cookie attribute
4.6 parsecs away

Travel
| | Cookies are typically sent to third parties in cross origin requests. This can be abused to do CSRF attacks. Recently a new cookie attribute was proposed to disable third-party usage for some cookies, to prevent CSRF attacks. This post will describe the same-site cookie attribute and how it helps against CSRF.
| | fosterelli.co
Dangerous use of express body-parser - Chris Foster
12.1 parsecs away

Travel
| Cross-Site Request Forgery, or CSRF, is a type of attack that developers are familiar with in traditional web applications, but often misunderstand or f......