faakhir-habib/aspnet-core-identity

ASP.NET Core Identity Series

ASP.NET Core Identity Series

The most complete guide for ASP.NET Core Identity

Part 1 - Getting Started

• Introduction to ASP.NET Core Identity library
• Describe ASP.NET Core Identity basic archirecture
• Explain the role and relationship between Stores and Managers and how they function under the hood
• Explain what Claims, ClaimsIdentity and ClaimsPrincipal entities are and how they are related
• Step by step guide on how to install and start using the core packages
• Associated repository branch: getting-started

Part 2 - Integrate Entity Framework

• Introduce Microsoft.Extensions.Identity.Stores and UserStoreBase store implementations
• Plug and configure Entity Framework Core with ASP.NET Core Identity and minimum configuration
• Explain Entity Framework different store implementations such as UserOnlyStore or UserStore
• Step by step guide for applying migrations and creating Identity's SQL Schema
• Discuss whether you should use ASP.NET Core Identity with Entity Framework
• Associated repository branch: entity-framework-integration

Part 3 - Deep Dive in authorization

• Explain Claims-based authorization by example
• Explain Role-based authorization by example
• Step by step guide for creating custom Authorization Policy Provider
• Explain how authorization works under the hood
• Explain Imperative authorization by example
• Associated repository branch: authorization

Part 4 - OAuth 2.0, OpenID Connect & IdentityServer

• Explain how OAuth 2.0 works (terminology, grant types, tokens)
• Explain how OpenID Connect works (terminology, tokens, flows)
• Learn how to use IdentityServer for integrating OAuth 2.0 and OpenID Connect
• Associated repository branch: identity-server

Part 5 - External provider authentication & registration strategy

• Step by step guides for enabling external provider authentication
  • Google authentication
  • Facebook authentication
  • Twitter authentication
  • Microsoft authentication
  • GitHub authentication
  • LinkedIn authentication
  • DropBox authentication
• Implement an external provider registration strategy
• Associated repository branch: external-authentication

Part 6 - Two-Factor Authentication

• Implement all Two Factor Authentication related tasks:
  • Enable/Disable 2FA
  • Configure authenticator app (QR Code included)
  • Generate/Reset recovery tokens
  • Reset authenticator app
• Explore the 2FA code and database schema
• Enhance the security level of 2FA by overriding the default implementation
  • Encrypt authenticator key
  • Encrypt recovery tokens
• Associated repository branch: two-factor-authentication

To be continued..

Installation instructions

The project is built with ASP.NET Core with Angular on the client side.

1. Basic project setup:
   • cd ./AspNetCoreIdentity where the package.json file exist
   • npm install
   • dotnet restore
   • dotnet build
   • dotnet run
2. Create the AspNetCoreIdentityDb database (skip if you want to run with In memory DB)
   • cd ./AspNetCoreIdentity where the AspNetCoreIdentity.csproj exist
   • Add-Migration initial_migration or dotnet ef migrations add initial_migration
   • Update-Database or dotnet ef database update
3. Create the IdentityServerDb database (skip if you want to run with In memory DB)
   • Follow the instructions

In case you don't want to use a real SQL Server Database when running the AspNetCoreIdentity project, simply set InMemoryProvider: true in the appsettings.json. This option will use in memory database

In case you don't want to use a real SQL Server Database when running the IdentityServer project simply set UseInMemoryStores: true in the relative appsettings.json This option will use in memory database

Follow chsakell's Blog

Facebook	Twitter
Microsoft Web Application Development

Donation

You can show your support to this project by making a donation via PayPal

License

Code released under the MIT license.