/explore
|
You are here 
|
brockallen.com | ||
| | | | |
www.sjoerdlangkemper.nl
Cookies are typically sent to third parties in cross origin requests. This can be abused to do CSRF attacks. Recently a new cookie attribute was proposed to disable third-party usage for some cookies, to prevent CSRF attacks. This post will describe the same-site cookie attribute and how it helps against CSRF. |
|
| | | | | ||
| | | | |
timdeschryver.dev
To improve the security of our Single Page Applications, let's ditch the access tokens in the browser and make the Backend for Frontend (BFF) responsible for the authentication process using the Authorization Code flow with PKCE. To achieve this, we'll use the Duende.BFF NuGet package and let it communicate with Auth0. |
|
| | | | | ||
| | | | |
damienbod.com
The article shows how an Angular nx Standalone UI hosted in an ASP.NET Core application can be secured using cookies.OpenIddict is used as the identity provider. The trusted application is protected using the Open ID Connect code flow with a secret and using PKCE. The API calls are protected using the secure cookie and anti-forgery... |
|
| | | | | ||
| | | | |
brunoscheufler.com
JSON Web Tokens are a popular way of managing authorization and authentication policies for web applications. Sending around a base64-encoded token that can be verified by every service using it, enables uncomplicated (and stateless) application design compared to other mechanisms.... |
|
| | | |||
