HTTP config.Routes.MapHttpRoute( name: “TodosForTodoList", routeTemplate: "api/todolists/{id}/todos", defaults: new { controller = “todolists”,

Slides:



Advertisements
Similar presentations
Web Application ASP.Net IIS App Middleware Server Host.
Advertisements

Authentication Simon Cross Partner Engineer facebook.com/sicross An Overview.
Protecting the code of Web Applications
Prabath Siriwardena | Johann Nallathamby.
HTTP Cookies. CPSC Application Layer 2 User-server state: cookies Many major Web sites use cookies Four components: 1) cookie header line of HTTP.
FIspace Security Components FIspace Security Components NetFutures 2015 FIspace project Javier Romero Negrín Javier Hitado Simarro ATOS Serdar Arslan KoçSistem.
Hannes Tschofenig (IETF#79, SAAG, Beijing). Acknowledgements I would like to thank to Pasi Eronen. I am re- using some of his slides in this presentation.
DGC Paris Community Authorization Service (CAS) and EDG Presentation by the Globus CAS team & Peter Kunszt, WP2.
Kerberos Authentication for Multi-organization Cross-Realm Kerberos Authentication User sent request to local Authentication Server Local AS shares cross-realm.
1 Trillion Azure AD authentications since the release of the service 50 M Office 365 users active every month >1 Billion authentications every.
INTRODUCTION The Group WEB BROWSER FOR RELATION Goals.
SACMAT02-1 Security Prototype Defining a Signature Constraint.
Creating your website Using Plain HTML. What is HTML? ► Web pages are authored in HyperText Markup Language (HTML) ► Plain text is marked up with tags,
ASP Cookies Y.-H. Chen International College Ming-Chuan University Fall, 2004.
Clients using wide variety of devices/languages/platforms Server applications using wide variety of platforms/languages Browser Native app Server.
Web Application Authentication with PKI & Other Functions Bill Weems & Mark B. Jones Academic Technology University of Texas Health Science Center at Houston.
Practical Steps to Secure your APIs for Mobile Mark O’Neill VP Innovation, Axway.
SPC204 Security Problems in SharePoint 2010 Authentication and Authorization.
Using OpenID/OAuth to access Federated Data Services M. Benno Blumenthal IRI of Columbia University GO-ESSP May 2011.
OAuth 2.0 in Depth By Rohit Ghatol SynerzipSynerzip Passionate about TechNextTechNext.
Understanding SharePoint 2013 Add-In Security Vulnerabilities
SIP OAuth Rifaat Shekh-Yusef IETF 90, SIPCore WG, Toronto, Canada July 21,
Model Lync Server 2013 REST API Media Manager (Media State) UI Lync Web App Lync for Windows Phone Lync for iPhone Lync for iPad Lync for.
Security and Performance Issues Mark J Cox UK Web Ltd.
Creating a User ID (1) User makes any HTTP request
1 Maryland ColdFusion User Group Session Management December 2001 Michael Schuler
Web Database Programming Week 7 Session Management & Authentication.
1-1 HTTP request message GET /somedir/page.html HTTP/1.1 Host: User-agent: Mozilla/4.0 Connection: close Accept-language:fr request.
J. Access Control to Video Resources TF-VVC.
Observations from the OAuth Feature Survey Mike Jones March 14, 2013 IETF 86.
THE DEVIL IS IN THE (IMPLEMENTATION) DETAILS: AN EMPIRICAL ANALYSIS OF OAUTH SSO SYSTEMS SAN-TSAI SUN & KONSTANTIN BEZNOSOV PRESENTED BY: NAZISH KHAN COMPSCI.
CP476 Internet Computing CGI1 Cookie –Cookie is a mechanism for a web server recall info of accessing of a client browser –A cookie is an object sent by.
An Authentication and Authorization Infrastructure: the PAPI System.
Ajax for Dynamic Web Development Gregory McChesney.
Esri UC 2014 | Demo Theater | Using ArcGIS Online App Logins in Node.js James Tedrick.
Agenda Pattern Authenticate a user against UCWA Operations happen using the user’s identity Interact with the UCWA service endpoint Make HTTP requests.
CSRF Attacks Daniel Chen 11/18/15. What is CSRF?  Cross Site Request Forgery (Sea-Surf)  AKA XSRF/ One Click / Sidejacking / Session Riding  Exploits.
Display Page (HTML/CSS)
API Auth By Kyle Bradley. Role Definitions  User (Resource Owner)  The resource owner is the person who is giving access to some portion of their account.
SAML Token Claims Based Identity SAML Token Claims Based Identity SPUser.
WEB-API & MVC5 - Identity & Security Mait Poska & Andres Käver, IT Kolledž 2014.
Cookies and Sessions in PHP. Arguments for the setcookie() Function There are several arguments you can use i.e. setcookie(‘name’, ‘value’, expiration,
27.1 Chapter 27 WWW and HTTP Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.
Secure Mobile Development with NetIQ Access Manager
Today’s Applications Web API Browser Native app Web API Web API
© 2014 IBM Corporation Mobile Customization & Administration IBM Connections 5.0 Workshop Author: Paul Godby IBM Ecosystem Development Duration: 30 minutes.
Wes Hackett Principal Solutions Architect Chris O’Brien Head of Development.
Unit testing of the Services Telerik Software Academy Web Services and Cloud.
Cookies Tutorial Cavisson Systems Inc..
Dr. Michael B. Jones Identity Standards Architect at Microsoft
Hannes Tschofenig, Derek Atkins
WMarket For Developers API && Authorization.
Y.-H. Chen International College Ming-Chuan University Fall, 2004
AAI … but This talk is about the second 'A': Authorisation.
WEB-API & MVC5 - Identity & Security
Cookies and Sessions in PHP
Addressing the Beast: Single Sign-On II
WStore Programmer Guide
IOS SDK v1.0 with NAM 4.2.
Agenda OAuth Concepts Programming OAuth.
JavaScript Form Validation
Session Tracking Techniques
Hyper Text Transfer Protocol
Office 365 Development.
SMART on FHIR for managed authorised access to medical records
Token-based Authentication
Security: Authentication & Authorization
D Guidance 26-Jun: Would like to see a refresh of this title slide
OpenID Enhanced Authentication Profile (EAP) Working Group
Presentation transcript:

HTTP

config.Routes.MapHttpRoute( name: “TodosForTodoList", routeTemplate: "api/todolists/{id}/todos", defaults: new { controller = “todolists”, action = “GetTodos” } ); public IEnumerable GetTodos() { … }

config.MapHttpAttributeRoutes(); [HttpGet("api/todolists/{id}/todos")] public IEnumerable GetTodos(int id) { … }

[HttpGet(“Demographics/{zipcode?}")] public Demographics Get(int? zipcode) { … } [HttpGet("people/{id:int}")] public Person Get(int id) { … } [HttpGet("people/{name:alpha}")] public Person Get(string name) { … } [HttpGet("Demographics/{zipcode=98052}")] public Demographics Get(int zipcode) { … }

Free Friends

Why no COOKI ES !?!

Authorization Grant Access Token Authorization Request Access Token

Protected Resource Client Authorization Server Authorization Endpoint Token Endpoint Browser CODE user User

Protected ResourceClient Authorization Server Authorization Endpoint Token Endpoint CODE 2 access tokenrefresh token Client 1 client

Protected ResourceClient authorization server Authorization Endpoint Token Endpoint 1 access token 2 refresh token Client Authorization: Bearer

Protected ResourceClient Authorization Server Authorization Endpoint Token Endpoint 2 access tokenrefresh token Client 1 client

Protected Resource Client