damienbod/aspnetcoremvcangular

ASP.NET Core MVC with angular in MVC View OpenID Connect Hybrid Flow

ASP.NET Code MVC Client with Angular View and IdentityServer4

Secured using Cookies, and OpenID Connect Hybrid Flow. Cookies configured with Same site and use Anti-forgery protection. Security headers are also applied.

Blogs

• Using Angular in an ASP.NET Core View with Webpack
• Secure ASP.NET Core MVC with Angular using IdentityServer4 OpenID Connect Hybrid Flow
• Anti-Forgery Validation with ASP.NET Core MVC and Angular

History

2022-01-28 Updated to .NET 6

2021-02-17 Updated packages

2020-12-08 Updated to .NET 5

2020-09-15 Updated IdentityServer4 to version 4.1.0, nuget, npm packages

2020-07-03 Updated IdentityServer4 to version 4.0.1, prompt=login bug fix

2020-06-27 Updated IdentityServer4 to version 4.0.0 and Angular to version 10.0.0

2020-06-23 Updated Nuget packages, Updating Angular packages

2020-03-03 Updated STS to support FIDO2

2020-02-25 Updated nuget packages, npm packages

2020-01-10 Updated nuget packages, same site fix

2019-12-21 Updated to .NET Core 3.1 Angular 8.2.14

2019-09-26 Updated to .NET Core 3.0 Angular 8.2.8

2019-09-14 Updated to .NET Core 3.0 preview 9, Angular 8.2.6

2019-08-27 Updated to .NET Core 3.0, Angular 8.2.3

2019-06-14 Updated to npm, nuget packages

2019-05-03 Updated to npm, nuget packages, in-process

2019-03-15 Updated to Angular 7.2.9, .NET Core 2.2

2018-09-17 Updated to Angular 6.1.7, latest .NET 2.1 packages, updated STS

2018-06-16 Updated to Angular 6.0.5

2018-06-16 Updated to ASP.NET Core 2.1

2017-09-22 Updated to ASP.NET Core 2.0, Angular 4.4.3

Links

https://docs.microsoft.com/en-us/aspnet/core/security/anti-request-forgery

https://stackoverflow.com/questions/46040922/angular4-httpclient-csrf-does-not-send-x-xsrf-token

https://en.wikipedia.org/wiki/Cross-site_request_forgery

aspnetcoremvcangular's Issues

WebAPI intergration scenario

Hi @damienbod

Thanks for a great contribution.
Do you think we can add a web api core project here?
The flow is:

MVC Angular will be redirected to IdentityServer login page. After successful login there, you will be navigated back to MVC angular.

Angular app need to interact with WebApi to do CRUD function on data.
How can we get a valid access token from MVC, so Angular can pass it to Webapi?

Thanks

Update to ASP.NET Core 2.0

prompt=login bug ID4

Update IdentityServer4 to version 4.0.1 when the bugfix is released. At present, ID4 does not support prompt=login

Routing only working within Angular (direct URL in browser doesn't work)

Hi @damienbod,

Thank you for this piece of brilliance.

I have noticed that the /about only works if you route within Angular. If you enter /about in the url of the browser it gets a 404 error, likewise if you do the same with /default. So it looks like we need some sort of fallback for routes.

Is there anyway to get this to work?

HMR and Visual Studio Debugging

Hi @damienbod ,

Thank you for the very useful contribution.

Could you please help me with the below requirement.

I want to enable HMR and would like to debug my API in visual studio .Something like JavaScript Services in Asp net core.
Unfortunately I am not allowed to use core so I am porting this code to use MVC5. Could you please help me with the above setup to launch my whole project from visual studio with HMR enabled.

I have seen ur other projects there u were using HMR by launching ur web pack and dotnet code using concurrent command.. But with that approach i could not debug my api since it is launched from cmd line. And also u were using html files for the script injection but here u are using cshtml it needs Mvc pipeline to run. So I cannot use the same approach by running at localhost:8080 for hmr.

Since I want to use windows authentication, I need MVC and cshtml approach.