Pro ASP.NET Core Identity: Under the Hood with Authentication and Authorization in ASP.NET Core 5 and 6 Applications 9781484268575, 9781484268582

Table of contents :
Table of Contents
About the Author
About the Technical Reviewer
Part I: Using ASP.NET Core Identity
Chapter 1: Getting Ready
What Do You Need to Know?
What Is the Structure of This Book?
Part 1: Using ASP.NET Core Identity
Part 2: Understanding ASP.NET Core
What Doesn’t This Book Cover?
What Software Do I Need for the Examples?
How Do I Set Up the Development Environment?
What If I Have Problems Following the Examples?
What If I Find an Error in the Book?
Are There Lots of Examples?
Where Can You Get the Example Code?
How Do I Contact the Author?
What If I Really Enjoyed This Book?
What If This Book Has Made Me Angry and I Want to Complain?
Summary
Chapter 2: Your First Identity Application
Setting Up the Development Environment
Installing the .NET SDK
Installing Node.js
Installing a Code Editor
Installing Visual Studio
Installing Visual Studio Code
Installing SQL Server LocalDB
Creating an Application with Identity
Preparing the Project
Creating the Data Model
Creating and Applying the Database Migrations
Configuring ASP.NET Core Identity
Creating the Application Content
Running the Example Application
Summary
Chapter 3: Creating the Example Project
Creating the Project
Installing the Bootstrap CSS Framework
Install Entity Framework Core
Defining a Connection String
Creating the Data Model
Creating MVC Controllers and Views
Creating Razor Pages
Configure the Application
Creating the Database
Running the Example Application
Enabling HTTPS Connections
Generating a Test Certificate
Enabling HTTPS
Enabling HTTPS Redirection
Restricting Access with an Authorization Policy
Applying the Level 2 Authorization Policy
Applying the Level 3 Authorization Policy
Configuring the Application
Summary
Chapter 4: Using the Identity UI Package
Preparing for This Chapter
Adding ASP.NET Core Identity to the Project
Adding the Identity UI Package to the Project
Defining the Database Connection String
Configuring the Application
Creating the Database
Preparing the Login Partial View
Testing the Application with Identity
Creating a New User Account
Managing an Account
Completing the Application Setup
Displaying Login Information
Creating a Consistent Layout
Configuring Confirmations
Displaying QR Codes
Using the Identity UI Workflows
Registration
Signing In and Out of the Application
Using Two-Factor Authentication
Recovering a Password
Changing Account Details
Managing Personal Data
Denying Access
Summary
Chapter 5: Configuring Identity
Preparing for This Chapter
Configuring Identity
Configuring User Options
Configuring Password Options
Configuring Sign-in Confirmation Requirements
Configuring Lockout Options
Configuring External Authentication
Configuring Facebook Authentication
Configuring ASP.NET Core for Facebook Authentication
Configuring Google Authentication
Configuring ASP.NET Core for Google Authentication
Configuring Twitter Authentication
Configuring ASP.NET Core for Twitter Authentication
Summary
Chapter 6: Adapting Identity UI
Preparing for This Chapter
Understanding Identity UI Scaffolding
Preparing for Identity UI Scaffolding
Listing the Identity UI Pages for Scaffolding
Using the Identity UI Scaffolding
Using Scaffolding to Change HTML
Using Scaffolding to Modify C# Code
Configuring the Account Management Pages
Changing the Management Layout
Adding an Account Management Page
Preparing the Navigation Link
Adding the Navigation Link
Defining the New Razor Page
Overriding the Default Layout in an Account Management Page
Tidying Up the QR Code Support
Doing the Scaffold File Shuffle
Modifying the Razor Page
Using Scaffolding to Disable Features
Summary
Chapter 7: Using the Identity API
Preparing for This Chapter
Creating the User and Administrator Dashboards
Creating the Custom Base Classes
Creating the Overview and Dashboard Pages
Using the Identity API
Processing Identity Results
Querying the User Data
Displaying a List of Users
Viewing and Editing User Details
Editing User Details
Fixing the Username and Email Problem
Understanding the User Store
Changing the Identity Configuration
Summary
Chapter 8: Signing In and Out and Managing Passwords
Preparing for This Chapter
Adding Passwords to the Seed Data
Signing In, Signing Out, and Denying Access
Signing into the Application
Signing Out of the Application
Creating the Forbidden Page
Configuring the Application
Completing the User Dashboard
Managing Passwords
Preparing the Email Confirmation Service
Performing Self-Service Password Changes
Performing Self-Service Password Recovery
Performing Administrator Password Changes
Restricting Access to the Custom Workflow Razor Pages
Summary
Chapter 9: Creating, Deleting, and Locking Accounts
Preparing for This Chapter
Creating User Accounts
Performing Self-Service Registration
Confirming Self-Registered Accounts
Resending Confirmation Emails
Handling Unconfirmed Sign-ins
Integrating Self-Service Registration
Locking Out Accounts
Forcing Immediate Sign-Outs
Deleting Accounts
Performing Self-Service Account Deletion
Summary
Chapter 10: Using Roles and Claims
Preparing for This Chapter
Using Roles
Managing Roles
Testing the Role Membership
Restricting Access to the Identity Administrator Dashboard
Populating the User and Role Store During Startup
Protecting the Dashboard Role
Protecting the Dashboard User
Updating the Test Account Seed Code
Navigating Directly to the Administration Dashboard
Applying the Authorization Policy
Managing Claims
Making Claims Easier to Use
Providing ASP.NET Core with Claims Data
Using Claims Data
Summary
Chapter 11: Two-Factor and External Authentication
Preparing for This Chapter
Supporting Two-Factor Authentication
Create the Two-Factor Overview Page
Creating the Authenticator Setup Page
Updating the User and Administrator Dashboards
Signing In with an Authenticator
Supporting External Authentication Services
Configuring the Application
Supporting Self-Service Registration an External Service
Supporting Administrator Registration with an External Service
Supporting Signing In with an External Service
Summary
Chapter 12: Authenticating API Clients
Preparing for This Chapter
Creating the JavaScript API Client
Using Simple Authentication for JavaScript Clients
Returning Status Code Responses for API Clients
Authenticating API Clients Directly
Preparing ASP.NET Core for Direct API Client Authentication
Enabling CORS
Adding Authentication to the JavaScript Client
Testing the Authentication API
Using Bearer Tokens
Configuring ASP.NET Core for JWT Bearer Tokens
Updating the API Authentication Controller
Specifying Token Authentication in the API Controller
Updating the JavaScript Client
Testing Token Authentication
Summary
Part II: Understanding ASP.NET Core Identity
Chapter 13: Creating the Example Project
Creating the Project
Installing the Bootstrap CSS Framework
Configuring Razor Pages
Configuring the MVC Framework
Configuring the Application
Testing the Application
Summary
Chapter 14: Working with ASP.NET Core
Preparing for This Chapter
Understanding the ASP.NET Core Request Flow
Understanding the Endpoint Routing Middleware
Authenticating and Authorizing Request Flow
Understanding Claims
Adding Claims to a Request
Assessing Claims
Improving the Authentication and Authorization
Signing In and Out of the Application
Defining Authorization Policy in the Endpoint
Implementing the Authentication Handler Interface
Configuring the Request Pipeline
Moving the Sign-In and Sign-Out Code
Using HTML Responses
Using the Built-In Cookie Authentication Handler
Summary
Chapter 15: Authorizing Requests
Preparing for This Chapter
Creating an Authorization Reporter
Creating the Report View
Creating an Endpoint
Configuring the Request Pipeline
Understanding Policies and Requirements
Defining the Custom Requirement and Handler
Creating and Applying the Policy
Using the Built-In Requirements
Combining Requirements
Restricting Access to a Specific Authorization Scheme
Targeting Authorization Policies
Changing the Default Authorization Policy
Configuring Targeted Authorization Polices
Using Named Policies
Creating Named Policies Using the Policy Builder
Combining Policies to Narrow Authorization
Creating Policy Exceptions
Applying Policies Using Razor Page Conventions
Applying Policies Using MVC Framework Filters
Summary
Chapter 16: Creating a User Store
Preparing for This Chapter
Installing ASP.NET Core Identity
Creating an Identity User Store
Creating the User Class
Creating the User Store
Implementing the Data Storage Methods
Implementing the Search Methods
Implementing the ID and Name Methods
Creating the Normalizer and Seeding the User Store
Configuring Identity and the Custom Services
Accessing the User Store
Working with User Store Data
Adding Optional Store Features
Adding Support for Querying the User Store
Querying the User Store
Adding Support for Storing Email Addresses and Phone Numbers
Using Email Addresses and Phone Numbers
Adding Custom User Class Properties
Validating User Data
Summary
Chapter 17: Claims, Roles, and Confirmations
Preparing for This Chapter
Storing Claims in the User Store
Managing Claims in the User Store
Storing Roles in the User Store
Managing Roles in the User Store
Understanding the Role Normalization Pitfall
Confirming User Contact Data
Understanding the Confirmation Process
Creating the Email and SMS Service Providers
Storing Security Stamps in the User Store
Updating the Security Stamp
Creating a Confirmation Token Generator
Creating the Confirmation Workflow
Summary
Chapter 18: Signing In with Identity
Preparing for This Chapter
Signing Users In
Creating the Claims Principal Factory
Signing Users In
Configuring the Application
Signing In Users with Passwords
Updating the User Class
Creating the Password Hasher
Storing Password Hashes in the User Store
Signing In to the Application with Passwords
Managing Passwords
Changing and Recovering Passwords
Resetting Passwords
Integrating the Password Features
Validating Passwords
Adding Custom Password Validation
Setting Passwords Administratively
Summary
Chapter 19: Creating a Role Store
Preparing for This Chapter
Creating a Custom Role Store
Creating the Role Class
Creating the Role Store
Implementing the Data Storage Methods
Implementing the Name Methods
Implementing the Search Methods
Making the Store Queryable
Seeding the Role Store and Configuring the Application
Managing Roles
Validating Roles
Creating a Custom Role Validator
Enforcing Role Consistency
Storing Claims with Roles
Extending the Role Class
Extending the Role Store
Extending the Claims Principal Factory
Seeding the Role Store with Claims
Managing Claims
Displaying Claims
Summary
Chapter 20: Lockouts and Two-Factor Sign-Ins
Preparing for This Chapter
Enabling Lockouts
Extending the User Class
Enabling Lockouts in the User Store
Managing Account Lockouts
Configuring Lockouts
Displaying a Lockout Notification
Restricting Signing In to Confirmed Accounts
Using Two-Factor Authentication
Updating the User Class
Extending the User Store to Support Two-Factor Authentication
Managing Two-Factor Authentication
Signing In with Two Factors
Creating the Two-Factor Token Generator
Configuring the Token Generator and Cookie Authentication Handler
Changing the Password Sign-In Process
Supporting the Second Factor
Forgetting the Client
Testing Two-Factor Sign-In
Restricting the Scope of Remembered Clients
Defining an Authorization Failed Landing Page
Creating the Page and Action Filters
Applying the Filter to a Page
Testing the Full Two-Factor Requirement
Summary
Chapter 21: Authenticators and Recovery Codes
Preparing for This Chapter
Using an Authenticator
Extending the User Class
Storing Authenticator Keys in the User Store
Managing Authenticator Keys
Enabling Authenticators in Two-Factor Sign-Ins
Configuring the Application
Creating the Seed Data
Setting Up an Authenticator
Using an Authenticator to Sign In
Using Recovery Codes
Storing Recovery Codes
Seeding the Data Store
Managing Recovery Codes
Using Recovery Codes to Sign In
Summary
Chapter 22: External Authentication, Part 1
Preparing for This Chapter
Preparing for External Authentication
Implementing the Selection Phase
Understanding the Preparation Phase
Understanding the Authentication Phase
Understanding the Correlation Phase
Extending the User Store
Correlating and Storing Logins
Understanding the OAuth Authentication Process
Preparing for External Authentication
Preparing the Simulated External Authentication Controller
Preparing the Authentication Handler
Step 1: Redirecting to the Authentication Service URL
Updating the External Authentication Controller
Updating the Authentication Handler
Step 2: Authenticating the User
Step 3: Receiving the Authorization Code
Updating the External Authentication Controller
Updating the Authentication Handler
Step 4: Exchanging the Authorization Code for an Access Token
Updating the External Authentication Controller
Updating the Authentication Handler
Step 5: Requesting User Data from the Authentication Service
Updating the External Authentication Controller
Updating the Authentication Handler
Completing the External Authentication Process
Summary
Chapter 23: External Authentication, Part 2
Preparing for This Chapter
Storing Authentication Tokens
Creating the Simulated External API Controller
Extending the User Class
Extending the User Store
Managing Authentication Tokens
Storing External Authentication Access Tokens
Using a Stored Authentication Token
Adding Support for Real External Authentication Services
Supporting Google Authentication
Configuring Application Credentials
Creating the Authentication Handler
Configuring the Application
Supporting Facebook Authentication
Obtaining Application Credentials
Creating the Authentication Handler
Configuring the Application
Simplifying the Sign-In Process
Updating the Sign-In Page
Creating the Password Page
Adding a GET Handler Method for External Authentication
Restricting Additional External Authentication
Summary
Index