* Updated Jwt Bearer Events to inlcude event for if the request is unauthorized * added forbidden as exception * updated reference assemblies * Updated code based on feedback from PR. * added empty line between methods * removed exception from ForbiddenContext based on response from pr. * added unit tests * re-generated the reference sources after removal of the exception from the forbidden context * removed failing test that was used for validation on the tests * Fixed tests. This was fixed before but i think during a merge i removed the updated code for the test. This is just adding it back * updated tests based on feedback in PR. * Removed extra line from csproj file * Revert ref csproj change |
||
|---|---|---|
| .. | ||
| Authentication | ||
| Authorization | ||
| CookiePolicy | ||
| benchmarks/Microsoft.AspNetCore.Security.Performance | ||
| samples | ||
| test/AuthSamples.FunctionalTests | ||
| AuthSamples.sln | ||
| README.md | ||
| Security.sln | ||
| startvs.cmd | ||
README.md
ASP.NET Core Security
Contains the security and authorization middlewares for ASP.NET Core.
A list of community projects related to authentication and security for ASP.NET Core are listed in the documentation.
See the ASP.NET Core security documentation.
Notes
ASP.NET Security does not include Basic Authentication middleware due to its potential insecurity and performance problems. If you host under IIS, you can enable Basic Authentication via IIS configuration. This project is part of ASP.NET Core.