Andrew Lock | .NET Escapades

Andrew Lock
Source Code Dive

  1. Exploring the ASP.NET Core Identity PasswordHasher

    In this post I'll look at some of the source code that makes up the ASP.NET Core Identity framework. In particular, I'm going to look at the PasswordHasher<T> implementation, and how it handles hashing user passwords for verification and storage. You'll also see how it handles…
    on ASP.NET Core ASP.NET Core Identity Security Source Code Dive - Comments

  2. Under the hood of the Middleware Analysis package

    In my last post I showed how you could use the Microsoft.AspNetCore.MiddlewareAnalysis package to analyse your middleware pipeline. In this post I take a look at the source code behind the package, to see how it's implemented. What can you use the package for? After you have added…
    on ASP.NET Core Middleware Source Code Dive Middleware Analysis Package - Comments

  3. Exploring IStartupFilter in ASP.NET Core

    Note The MEAP preview of my book, ASP.NET Core in Action is now available from Manning! Use the discount code mllock to get 50% off, valid through February 13. I was spelunking through the ASP.NET Core source code the other day, when I came across something I hadn't…
    on ASP.NET Core Source Code Dive Middleware Analysis Package Middleware - Comments

  4. Making ConcurrentDictionary GetOrAdd thread safe using Lazy

    I was browsing the ASP.NET Core MVC GitHub repo the other day, checking out the new 1.1.0 Preview 1 code, when I spotted a usage of ConcurrentDictionary that I thought was interesting. This post explores the GetOrAdd function, the level of thread safety it provides, and ways…
    on ASP.NET Core Source Code Dive - Comments

  5. A look behind the JWT bearer authentication middleware in ASP.NET Core

    This is the next in a series of posts about Authentication and Authorisation in ASP.NET Core. In the first post we had a general introduction to authentication in ASP.NET Core, and then in the previous post we looked in more depth at the cookie middleware, to try and…
    on ASP.NET Core Security Auth Source Code Dive - Comments

  6. Exploring the cookie authentication middleware in ASP.NET Core

    This is the second in a series of posts looking at authentication and authorisation in ASP.NET Core. In the previous post, I talked about authentication in general and how claims-based authentication works. In this post I'm going to go into greater detail about how an AuthenticationMiddleware is implemented in…
    on ASP.NET Core Source Code Dive Auth Security - Comments