1. Enjoy this blog? My book, ASP.NET Core in Action is available now! Click here to get the 1st chapter free.
2. Creating and trusting a self-signed certificate on Linux for use in Kestrel and ASP.NET Core

   In this post I show how to create a self-signed certificate on Linux. I show how you can trust the certificate, and how to configure Kestrel to use it.…

   October 03, 2017 in ASP.NET Core ASP.NET Core 2.0 Security
3. Creating a validator to check for common passwords in ASP.NET Core Identity

   In this post, I introduce a package for ASP.NET Core Identity that lets you validate a user hasn't used one of the most common 100,000 passwords.…

   July 18, 2017 in ASP.NET Core ASP.NET Core Identity Security .NET Core 2.0 Preview 2
4. Creating custom password validators for ASP.NET Core Identity

   In this post, I describe the password validation settings for ASP.NET Core Identity, how to customise them, and how to write a custom password validator.…

   July 13, 2017 in ASP.NET Core Security ASP.NET Core Identity .NET Core 2.0 Preview 2
5. Automatically validating anti-forgery tokens in ASP.NET Core with the AutoValidateAntiforgeryTokenAttribute

   This post shows how to apply the AutoValidateAntiforgeryTokenAttribute globally to automatically protect all dangerous action methods from CSRF attacks.…

   June 12, 2017 in ASP.NET Core Security CSRF
6. Preventing mass assignment or over posting in ASP.NET Core

   Mass assignment or over-posting is something to bear in mind when building ASP.NET Core applications. In this post, I discuss some of the ways to stay safe.…

   March 21, 2017 in ASP.NET Core Security
7. Resource-based authorisation in ASP.NET Core

   In this next post on authorisation in ASP.NET Core, we look at how you can secure resources based on properties of that resource itself.…

   October 25, 2016 in ASP.NET Core Auth Security