ASP.NET Core Security

12 Securing web applications with ASP.NET Core Identity

This chapter covers

• Using ASP.NET Core Identity for authentication and authorization
• Using scaffolding to tweak the ASP.NET Core Identity UI
• Configuring password options
• Implementing two-factor authentication
• Allowing users to log into an application with a third-party account

At the end of 2011, Microsoft released the MS11-100 security advisory (which basically means number 100 in 2011, which is quite a lot, actually). The title of the document, available at http://mng.bz/pOXK, sounds pretty dramatic: “Vulnerabilities in .NET Framework Could Allow Elevation of Privilege.” And, indeed, it was dramatic. In early October of that year, security researchers found a security vulnerability in ...