asp.net-core-identity – Tarik Billa

.NetCore JwtBearerAuthentication not rejecting expired tokens

April 9, 2024 by Tarik

I stumbled over the answer here if anyone is interested. Default value for ClockSkew is 5 minutes. app.UseJwtBearerAuthentication(new JwtBearerOptions() { AutomaticAuthenticate = true, AutomaticChallenge = true, TokenValidationParameters = new TokenValidationParameters() { ValidIssuer = Configuration[“Tokens:Issuer”], ValidAudience = Configuration[“Tokens:Audience”], ValidateIssuerSigningKey = true, IssuerSigningKey = new Certificate(certPath: Configuration[“Tokens:Certificate”], isValid: false).SecurityKey, ValidateLifetime = true, ValidateIssuer = true, ValidateAudience = … Read more

How should I access my ApplicationUser properties from ASP.NET Core Views?

December 25, 2023 by Tarik

Update to original answer: (This violates the op’s first requirement, see my original answer if you have the same requirement) You can do it without modifying the claims and adding the extension file (in my original solution) by referencing FullName in the Razor View as: @UserManager.GetUserAsync(User).Result.FullName Original Answer: This is pretty much just a shorter … Read more

NormalizedUserName VS Username in DotNet Core

December 5, 2023 by Tarik

1) Normalization stops people registering user names which only differ in letter casing. 2) No – those fields are part of the basic data model.

Using AspNetUserTokens table to store refresh token in ASP.NET Core Web Api

September 22, 2023 by Tarik

I’ll answer your question directly then propose an alternative. You can Remove, Set, Get, and Validate tokens with the AspNetUserTokens table. However, you can probably skip the db and I’ll describe that below. The following methods of the UserManager will generate and store: await _userManager.RemoveAuthenticationTokenAsync(user, “MyApp”, “RefreshToken”); var newRefreshToken = await _userManager.GenerateUserTokenAsync(user, “MyApp”, “RefreshToken”); await … Read more

UserManager.CheckPasswordAsync vs SignInManager.PasswordSignInAsync

September 9, 2023 by Tarik

The two methods you’ve mentioned serve different purposes: 1. UserManager.CheckPasswordAsync This method hashes the provided password and compares it against the existing password hash (stored in the database, for example). 2. SignInManager.PasswordSignInAsync This method does a lot more. Here’s a rough breakdown: Checks whether sign-in is allowed. For example, if the user must have a … Read more

How to return 401 instead of 302 in ASP.NET Core?

August 11, 2023 by Tarik

As of ASP.NET Core 2.x: services.ConfigureApplicationCookie(options => { options.Events.OnRedirectToLogin = context => { context.Response.StatusCode = 401; return Task.CompletedTask; }; });

How to load navigation properties on an IdentityUser with UserManager

July 18, 2023 by Tarik

Unfortunately, you have to either do it manually or create your own IUserStore<IdentityUser> where you load related data in the FindByEmailAsync method: public class MyStore : IUserStore<IdentityUser>, // the rest of the interfaces { // … implement the dozens of methods public async Task<IdentityUser> FindByEmailAsync(string normalizedEmail, CancellationToken token) { return await context.Users .Include(x => x.Address) … Read more

How to mock UserManager in .Net Core testing?

May 11, 2023 by Tarik

I know this is months old but I keep getting back to this thread. I will extend my own answer on this topic because just pointing to Haok’s GitHub example is like saying: “Read a book” as it is huge. It does not pinpoint the issue and what you need to do. You need to … Read more

ASP.NET Core 2.0 JWT Validation fails with `Authorization failed for user: (null)` error

April 21, 2023 by Tarik

The sequence of the add statements in the configure function is of importance. Make sure that app.UseAuthentication(); comes before app.UseMvc(); Might this have been the problem?

.NET Core 2.1 Identity get all users with their associated roles

March 31, 2023 by Tarik

I have now implemented the following solution. As CodeNotFound pointed out in the comments, IdentityUser used to have a Roles property. This is no longer the case in .NET Core. This comment/issue on GitHub seems to be the current solution for .Net Core. I have attempted to implemented it with the following code: ApplicationUser public … Read more