chsakell/aspnet-core-identity

ASP.NET Core Identity Series

ASP.NET Core Identity Series

The most complete guide for ASP.NET Core Identity

Part 1 - Getting Started

• Introduction to ASP.NET Core Identity library
• Describe ASP.NET Core Identity basic archirecture
• Explain the role and relationship between Stores and Managers and how they function under the hood
• Explain what Claims, ClaimsIdentity and ClaimsPrincipal entities are and how they are related
• Step by step guide on how to install and start using the core packages
• Associated repository branch: getting-started

Part 2 - Integrate Entity Framework

• Introduce Microsoft.Extensions.Identity.Stores and UserStoreBase store implementations
• Plug and configure Entity Framework Core with ASP.NET Core Identity and minimum configuration
• Explain Entity Framework different store implementations such as UserOnlyStore or UserStore
• Step by step guide for applying migrations and creating Identity's SQL Schema
• Discuss whether you should use ASP.NET Core Identity with Entity Framework
• Associated repository branch: entity-framework-integration

Part 3 - Deep Dive in authorization

• Explain Claims-based authorization by example
• Explain Role-based authorization by example
• Step by step guide for creating custom Authorization Policy Provider
• Explain how authorization works under the hood
• Explain Imperative authorization by example
• Associated repository branch: authorization

Part 4 - OAuth 2.0, OpenID Connect & IdentityServer

• Explain how OAuth 2.0 works (terminology, grant types, tokens)
• Explain how OpenID Connect works (terminology, tokens, flows)
• Learn how to use IdentityServer for integrating OAuth 2.0 and OpenID Connect
• Associated repository branch: identity-server

Part 5 - External provider authentication & registration strategy

• Step by step guides for enabling external provider authentication
  • Google authentication
  • Facebook authentication
  • Twitter authentication
  • Microsoft authentication
  • GitHub authentication
  • LinkedIn authentication
  • DropBox authentication
• Implement an external provider registration strategy
• Associated repository branch: external-authentication

Part 6 - Two-Factor Authentication

• Implement all Two Factor Authentication related tasks:
  • Enable/Disable 2FA
  • Configure authenticator app (QR Code included)
  • Generate/Reset recovery tokens
  • Reset authenticator app
• Explore the 2FA code and database schema
• Enhance the security level of 2FA by overriding the default implementation
  • Encrypt authenticator key
  • Encrypt recovery tokens
• Associated repository branch: two-factor-authentication

To be continued..

Installation instructions

The project is built with ASP.NET Core with Angular on the client side.

1. Basic project setup:
   • cd ./AspNetCoreIdentity where the package.json file exist
   • npm install
   • dotnet restore
   • dotnet build
   • dotnet run
2. Create the AspNetCoreIdentityDb database (skip if you want to run with In memory DB)
   • cd ./AspNetCoreIdentity where the AspNetCoreIdentity.csproj exist
   • Add-Migration initial_migration or dotnet ef migrations add initial_migration
   • Update-Database or dotnet ef database update
3. Create the IdentityServerDb database (skip if you want to run with In memory DB)
   • Follow the instructions

In case you don't want to use a real SQL Server Database when running the AspNetCoreIdentity project, simply set InMemoryProvider: true in the appsettings.json. This option will use in memory database

In case you don't want to use a real SQL Server Database when running the IdentityServer project simply set UseInMemoryStores: true in the relative appsettings.json This option will use in memory database

Follow chsakell's Blog

Facebook	Twitter
Microsoft Web Application Development

Show me your support! ❤️ 👏

License

Code released under the MIT license.

aspnet-core-identity's Issues

Where is the description?

I can't find any textual description.
In addition, what is the default login for AspNetCoreIdentity

The presentation for OAuth 2.0 and OpenID Connect request

Hi there,
I like your sharing of the topic very much.
Could you share the slides to this repository. Because I found some remarks in some slides are very important, It's hard to read in the web page.

Best Regards

Readme

I think you have an issue with a readme file in section Installation instruction
the package.json file resides inside the ClientApp folder.

VS 2022, get 'The "@angular/compiler-cli" package was not properly installed' despite running 'npm install' before

Trying to run the project from VS 2022, but got 'The "@angular/compiler-cli" package was not properly installed' error message right at the call app.UseWebpackDevMiddleware(). What should I do to have it fixed?

Bug: When access "Account/Login" Return Status:401 Unauthorized

public class StreamingCategoryPolicyProvider : IAuthorizationPolicyProvider { // .... public Task<AuthorizationPolicy> GetFallbackPolicyAsync() => FallbackPolicyProvider.GetDefaultPolicyAsync(); }

Will cause all pages to become inaccessible

it shouold be

public class StreamingCategoryPolicyProvider : IAuthorizationPolicyProvider { // .... public Task<AuthorizationPolicy> GetFallbackPolicyAsync() => FallbackPolicyProvider.GetFallbackPolicyAsync(); }

Do you know any way to implement MFA within a Web Api using Identity server?

Do you know any way to implement MFA within a Web Api using Identity server?

Something like this https://auth0.com/blog/introducing-the-mfa-api/#Example--A-CLI-App-with-MFA

I've had hard time customizing identity server to do this. The simple task of returning an mfa_token from ResourceOwnerPassword grant with Grant Store support for cleanup seems overwhelming.