Commit Graph

141 Commits (cf5a94c7b28a4aa5233a36b0a1a22a7474906565)

Author SHA1 Message Date
Luke Latham 190c62af0c Add blank lines around versioning lines (#8548)
Fixes #8540 

Now, I'm off to buy some J&J stock ... the parent company of a popular eye care product! 😣
2018-09-16 09:14:07 -10:00
Rick Anderson c993428091
Update secure-data.md (#8525)
Fixes #8502
2018-09-13 19:27:11 -07:00
Luke Latham 46f41d4774
Update All and App package versions (#8513) 2018-09-13 11:39:23 -05:00
Rick Anderson a09f423d5e
Update secure-data.md (#8487)
Fixes #8474
@gaazkam @smariussorin @C-BERBER please review
2018-09-11 15:21:34 -07:00
Luke Latham 1a0f79a8fe
Update All/App package version (#8489) 2018-09-11 08:53:03 -05:00
Rick Anderson 07705e5a7b
Update secure-data.md (#8325)
* Update secure-data.md

* Update secure-data.md

* Update secure-data.md
2018-08-30 12:42:27 -07:00
Luke Latham f85202290b Remove HTTP links to Microsoft (#8353)
Fixes #8350
2018-08-30 11:48:27 -07:00
Rick Anderson 6ac0d79fb0
2.1 update of secure user data (#7651)
- [x] Blocked until https://github.com/aspnet/Identity/issues/1813 bits (https://github.com/aspnet/Identity/pull/1832) are surfaced in 2.2 preview

Fixes #6290 
Fixes #7108
[Review URL](https://review.docs.microsoft.com/en-us/aspnet/core/security/authorization/secure-data?view=aspnetcore-2.1&branch=pr-en-us-7651)

@blowdart this is an upgrade to 2.1 with the following security changes:

* The project was generated with the 2.1 templates:
	* *Startup.cs* is based on the 2.1 version.
	* `AddDefaultIdentity` is used, replaced the template generated Identity 2.0 UI with the Identity 2.1 RCL.
* I fixed in the previous version where an unauthorized person could see details by hacking the URL. See [new code here](51f4712af6/aspnetcore/security/authorization/secure-data/samples/final2.1/Pages/Contacts/Details.cshtml.cs (L34-L44)).
* Uses 2.2 preview-1 because of https://github.com/aspnet/Identity/issues/1813

So it shouldn't require a full audit.
cc @joeaudette
2018-08-27 12:31:50 -07:00
Luke Latham 1144b57b11
Link sample at top of auth policy povider topic (#8119) 2018-08-16 09:06:10 -05:00
Luke Latham 232d345f9e
Specify "Core" for ASP.NET Core refs (#8110) 2018-08-15 22:30:29 -05:00
Luke Latham 3f064e75e5
Auth area pages/area folders in RP conventions (#8081) 2018-08-14 16:13:03 -05:00
Rick Anderson b504da9991
Document no support for filters on page handler methods. (#7878)
* Update roles.md

* Update roles.md

* Update roles.md
2018-07-30 13:58:27 -06:00
Luke Latham 940ea3c502 Dependency injection topic and sample updates (#7412)
* Dependency injection topic and sample updates

Updates

Updates

Updates

Updates

* React to feedback

* React to feedback

* Update

* Update ctor injection behavior section (6331)

* React to feedback

* React to feedback

* Link updates

* React to feedback

* React to feedback

React to feedback

Updates

* React to feedback

* Ping me for feedback

* Describe ActivatorUtilities

* Update

* Crosslink repository pattern
2018-07-28 16:49:23 -06:00
Luke Latham 34b33e245b Add version to App package references (#7551)
Fixes #7532
2018-07-10 22:43:09 -05:00
Luke Latham 2059dd8b41
Add CRLF to the last line of MD topics (#7509) 2018-07-08 21:48:10 -05:00
Mark Lawrence d0d700292c
Correct broken link to source code sample 2018-07-06 15:47:28 -07:00
Rick Anderson 66ab2b2171
Update Startup.cs (#7481) 2018-07-05 21:18:29 -06:00
Luke Latham ab71044a40
Correct spelling (#7349) 2018-06-28 08:18:08 -05:00
Luke Latham 19731862dd
Fix warning in Simple authorization topic (#7290) 2018-06-25 19:56:24 -05:00
Jack Franklin Perry, Jr 73ce00711d Update AccessDenied.cshtml (#7247)
It was just missing the @ in the <h1> tag for the title.
2018-06-22 13:34:43 -05:00
Scott Addie a18a6bdc8c
Metadata updates to ASP.NET Core security docs (#7188)
Addresses #6541
2018-06-20 12:43:43 -05:00
Scott Addie 8ccb73e740 Add ToC link for authz policy providers doc (#7177) 2018-06-20 08:14:02 -07:00
Scott Addie 645d057bbb
Metadata updates for the Razor Pages docs (#7127)
* Metadata updates for the Razor Pages docs

* Update sample download links

* Change uid values

* Remove unnecessary redirection rule

* Fix date metadata warnings

* Add redirect entries

* Fix invalid link after rebase
2018-06-19 15:06:11 -05:00
Rick Anderson 3ab3871294
Update secure-data.md (#7065)
* Update secure-data.md

* Update secure-data.md

* Update secure-data.md
2018-06-14 19:43:17 -07:00
Simon Yates ab9c8d8263 Fix HTTPS vs SSL app setting reference (#7008)
* Fix HTTPS vs SSL app setting reference

* Update secure-data.md

* Update appsettings.json
2018-06-12 13:59:07 -07:00
Luke Latham afeb44d33e
Fix link (#6978) 2018-06-10 19:38:46 -05:00
Luke Latham 097972cff6
Add webapp alias notice (#6939) 2018-06-08 20:02:20 -05:00
Luke Latham 7fb5e11436
2.1 Sample Updates (Round 8) (#6835) 2018-06-04 12:04:01 -05:00
Luke Latham 8aa1b0815c
Use 'webapp' alias for RP template (#6694) 2018-05-30 14:48:08 -05:00
Luke Latham a5928a33e1 Cross-link RP filtering to RP conventions (#6646)
Update
2018-05-29 15:47:01 -10:00
Tom Austin f1cb1666d0 Added missing AllowAnonymous to ForgotPassword and ForgotPasswordConfirmation. Previously it was impossible to navigate to these pages unless logged in which makes no sense if you are trying to reset your password. (#6614) 2018-05-26 10:07:55 -10:00
Michael DePouw 4c8ea3b7e4 Add reference to RequireAssertion() (#6473) 2018-05-18 09:57:26 -05:00
Luke Latham 49e38929e5
Revert tab controls (#6350) 2018-05-10 19:58:40 -05:00
Rick Anderson dd0081eab2
Secure user data sample help (#6289) 2018-05-08 16:40:58 -10:00
Mike Rousos 8609b22061 IAuthorizationPolicyProvider documentation (#6185)
* Initial IAuthorizationPolicyProvider documentation

* Fix links to use xref pattern

* Adjust some phrasing to use more second-person perspective, more active voice, and less future tense

(as suggested by https://github.com/dotnet/docs/blob/master/styleguide/voice-tone.md)

* A few more readability/style tweaks

* Update iauthorizationpolicyprovider.md

* Update iauthorizationpolicyprovider.md

* A few tweaks based on PR feedback

* Readability improvements based on PR feedback

* Include external policy providers as a reason for using `IAuthorizatonPolicyProvider`
2018-05-07 10:09:51 -10:00
Luke Latham f01c69f86b TOC and topic renaming with "feature" removals (#6194)
* TOC and topic renaming work

* Updates

* TOC and topic renaming work

Updates

* Updates
2018-05-03 14:38:00 -05:00
Luke Latham 7048bb8fbf API link updates (#6149)
* API link updates

Updates

One more!

Fix bookmark

Mo updates

More updates

Updates

Updates

* Update action-return-types.md

* Update index.md

* Update concurrency.md

* Update intro.md

* Update localization.md

* Update search.md
2018-05-02 14:45:06 -05:00
Rick Anderson f6c5a25695
authorization requires an authentication mechanism (#5901)
* Update introduction.md

* Update introduction.md

* Update introduction.md

* Update introduction.md

* Update introduction.md
2018-04-10 11:57:51 -10:00
Rick Anderson 1832723bd1
CI Update (#5878) 2018-04-04 13:51:35 -10:00
Luke Latham bdb6d7cafc Title, description, and H1 updates (4) (#5745)
* Title, description, and H1 updates (4)

* Updates

* Updates

* Drop gerunds and update link text

* Update

* Update next.md

* Update routing.md
2018-03-21 14:18:35 -10:00
Luke Latham f7e92a3e67 Title, description, and H1 updates (3) (#5717) 2018-03-19 13:40:34 -10:00
Luke Latham 5894c88187 Security link updates (#5727)
Updates

Revert
2018-03-18 21:25:14 -05:00
Rian Stockbower 943325ae99 Iterating the PendingRequirements collection and calling Succeed on an element modifies the collection throwing an InvalidOperationException https://github.com/aspnet/Security/issues/1375 (#5587) 2018-03-05 21:47:17 -06:00
Luke Latham af3096253c
Title, description, and H1 updates (1) (#5574) 2018-03-01 15:21:56 -06:00
Luke Latham f047169540 Drop [Main] from snippet references (#5547) 2018-02-24 10:08:11 -06:00
Caro Caserio bcba2cc3b9 CC50099: Content updated (#5514)
* CC50099: Content updated

Hello, @rick-anderson,

This proposed file change comes from this Community Contribution: https://github.com/aspnet/Docs.fr-fr/pull/55/files.

Please, help to check this proposed file change into the article and help to merge if you agree with fix. If not, please, let me know either if you would like me to fix it in another way within this PR, if you prefer to fix it in another PR or if I should close this PR as by-design. In case of using another PR, please, let me know of your PR number, so we can confirm and close this PR.

Many thanks in advance.

* Minor tweaks
2018-02-20 09:30:35 -06:00
Barld Boot fe5a497f57 Update index.md (#5515)
* Update index.md

* Update content
2018-02-20 09:18:46 -06:00
Rick Anderson 4d69b62611
remove AuthorizeFolder in secure user data (#5451)
* remove AuthorizeFolder in secure user data

* SSL to HTTPS
2018-02-13 11:39:53 -10:00
Scott Addie 55adac1c98
Mention InvokeHandlersAfterFailure property in policy auth doc (#5445)
* Mention InvokeHandlersAfterFailure property in policy auth doc

* React to feedback

* React to feedback
2018-02-13 13:37:31 -06:00
Mikael 9fc4d1bd64 Replace AllowAnonymousAttribut by AllowAnonymous (#5397)
Replace AllowAnonymousAttribut by AllowAnonymous for the name of the attribut
2018-02-08 10:56:26 -06:00