/explore
|
You are here 
|
brockallen.com | ||
| | | | |
timdeschryver.dev
|
|
| | | | | To improve the security of our Single Page Applications, let's ditch the access tokens in the browser and make the Backend for Frontend (BFF) responsible for the authentication process using the Authorization Code flow with PKCE. To achieve this, we'll use the Duende.BFF NuGet package and let it communicate with Auth0. | |
| | | | |
damienbod.com
|
|
| | | | | The article shows how an Angular nx Standalone UI hosted in an ASP.NET Core application can be secured using cookies.OpenIddict is used as the identity provider. The trusted application is protected using the Open ID Connect code flow with a secret and using PKCE. The API calls are protected using the secure cookie and anti-forgery... | |
| | | | |
leastprivilege.com
|
|
| | | | | As part of the recent discussions around how to build clients for OpenID Connect and OAuth 2.0 based systems (see e.g. Brock's post here), we substantially updated our workshopand supporting libraries. The updated material (both workshop and break-out sessions) will be part of the upcoming conferences (Oslo, London, Porto, Copenhagen...). One piece of the puzzle... | |
| | | | |
www.adamalbrecht.com
|
|
| | | UPDATE: There have been some changes in the JWT Gem that make some of the below not work exactly right (it'll still be about 90% the same). Specifically, they added expiration support. See my post on the same topic, but using React.js. The server side code in this post will work just as well with Angular. | ||
