C# 8 and .NET Core 3 Projects Using Azure - Second Edition
by Paul Michaels, Dirk Strauss, Jas Rademeyer
Grant types
The first loose end we have is the grant type. We're not going to change this, but we are going to investigate why we should (or at least why we should consider changing it). The grant type that we're using is Resource Owner Password; what this gives us is the ability to capture a user's username and password and then send that off to IdentityServer, along with a key. We then get back a token, and we can use that token to communicate with our resource. In our case, the resource is an API. This is a secure system to an extent.
Let's put our black hats on and have a think about how we might compromise such a system. Remember that we're dealing with desktop software, and in the case of .NET, as we've previously stated, it is extremely ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access