Pro ASP.NET Core Identity: Under the Hood with Authentication and Authorization in ASP.NET Core 5 and 6 Applications

Table of Contents
About the Author
About the Technical Reviewer
Part I: Using ASP.NET Core Identity
	Chapter 1: Getting Ready
		What Do You Need to Know?
		What Is the Structure of This Book?
			Part 1: Using ASP.NET Core Identity
			Part 2: Understanding ASP.NET Core
		What Doesn’t This Book Cover?
		What Software Do I Need for the Examples?
		How Do I Set Up the Development Environment?
		What If I Have Problems Following the Examples?
		What If I Find an Error in the Book?
		Are There Lots of Examples?
		Where Can You Get the Example Code?
		How Do I Contact the Author?
		What If I Really Enjoyed This Book?
		What If This Book Has Made Me Angry and I Want to Complain?
		Summary
	Chapter 2: Your First Identity Application
		Setting Up the Development Environment
			Installing the .NET SDK
			Installing Node.js
			Installing a Code Editor
			Installing Visual Studio
			Installing Visual Studio Code
				Installing SQL Server LocalDB
		Creating an Application with Identity
			Preparing the Project
			Creating the Data Model
			Creating and Applying the Database Migrations
			Configuring ASP.NET Core Identity
			Creating the Application Content
			Running the Example Application
		Summary
	Chapter 3: Creating the Example Project
		Creating the Project
		Installing the Bootstrap CSS Framework
		Install Entity Framework Core
			Defining a Connection String
		Creating the Data Model
		Creating MVC Controllers and Views
		Creating Razor Pages
		Configure the Application
		Creating the Database
		Running the Example Application
		Enabling HTTPS Connections
			Generating a Test Certificate
			Enabling HTTPS
			Enabling HTTPS Redirection
		Restricting Access with an Authorization Policy
			Applying the Level 2 Authorization Policy
			Applying the Level 3 Authorization Policy
			Configuring the Application
		Summary
	Chapter 4: Using the Identity UI Package
		Preparing for This Chapter
		Adding ASP.NET Core Identity to the Project
			Adding the Identity UI Package to the Project
			Defining the Database Connection String
			Configuring the Application
			Creating the Database
			Preparing the Login Partial View
		Testing the Application with Identity
			Creating a New User Account
			Managing an Account
		Completing the Application Setup
			Displaying Login Information
			Creating a Consistent Layout
			Configuring Confirmations
			Displaying QR Codes
		Using the Identity UI Workflows
			Registration
			Signing In and Out of the Application
			Using Two-Factor Authentication
			Recovering a Password
			Changing Account Details
			Managing Personal Data
			Denying Access
		Summary
	Chapter 5: Configuring Identity
		Preparing for This Chapter
		Configuring Identity
			Configuring User Options
			Configuring Password Options
			Configuring Sign-in Confirmation Requirements
			Configuring Lockout Options
		Configuring External Authentication
			Configuring Facebook Authentication
				Configuring ASP.NET Core for Facebook Authentication
			Configuring Google Authentication
				Configuring ASP.NET Core for Google Authentication
			Configuring Twitter Authentication
				Configuring ASP.NET Core for Twitter Authentication
		Summary
	Chapter 6: Adapting Identity UI
		Preparing for This Chapter
		Understanding Identity UI Scaffolding
		Preparing for Identity UI Scaffolding
		Listing the Identity UI Pages for Scaffolding
		Using the Identity UI Scaffolding
			Using Scaffolding to Change HTML
			Using Scaffolding to Modify C# Code
		Configuring the Account Management Pages
			Changing the Management Layout
			Adding an Account Management Page
				Preparing the Navigation Link
				Adding the Navigation Link
				Defining the New Razor Page
			Overriding the Default Layout in an Account Management Page
			Tidying Up the QR Code Support
				Doing the Scaffold File Shuffle
				Modifying the Razor Page
		Using Scaffolding to Disable Features
		Summary
	Chapter 7: Using the Identity API
		Preparing for This Chapter
		Creating the User and Administrator Dashboards
			Creating the Custom Base Classes
			Creating the Overview and Dashboard Pages
		Using the Identity API
			Processing Identity Results
			Querying the User Data
			Displaying a List of Users
			Viewing and Editing User Details
				Editing User Details
			Fixing the Username and Email Problem
		Understanding the User Store
			Changing the Identity Configuration
		Summary
	Chapter 8: Signing In and Out and Managing Passwords
		Preparing for This Chapter
		Adding Passwords to the Seed Data
		Signing In, Signing Out, and Denying Access
			Signing into the Application
			Signing Out of the Application
			Creating the Forbidden Page
			Configuring the Application
		Completing the User Dashboard
		Managing Passwords
			Preparing the Email Confirmation Service
			Performing Self-Service Password Changes
			Performing Self-Service Password Recovery
			Performing Administrator Password Changes
		Restricting Access to the Custom Workflow Razor Pages
		Summary
	Chapter 9: Creating, Deleting, and Locking Accounts
		Preparing for This Chapter
		Creating User Accounts
			Performing Self-Service Registration
				Confirming Self-Registered Accounts
				Resending Confirmation Emails
				Handling Unconfirmed Sign-ins
				Integrating Self-Service Registration
		Locking Out Accounts
			Forcing Immediate Sign-Outs
		Deleting Accounts
			Performing Self-Service Account Deletion
		Summary
	Chapter 10: Using Roles and Claims
		Preparing for This Chapter
		Using Roles
			Managing Roles
			Testing the Role Membership
			Restricting Access to the Identity Administrator Dashboard
				Populating the User and Role Store During Startup
				Protecting the Dashboard Role
				Protecting the Dashboard User
				Updating the Test Account Seed Code
				Navigating Directly to the Administration Dashboard
				Applying the Authorization Policy
		Managing Claims
			Making Claims Easier to Use
			Providing ASP.NET Core with Claims Data
			Using Claims Data
		Summary
	Chapter 11: Two-Factor and External Authentication
		Preparing for This Chapter
		Supporting Two-Factor Authentication
			Create the Two-Factor Overview Page
			Creating the Authenticator Setup Page
			Updating the User and Administrator Dashboards
		Signing In with an Authenticator
		Supporting External Authentication Services
			Configuring the Application
			Supporting Self-Service Registration an External Service
			Supporting Administrator Registration with an External Service
			Supporting Signing In with an External Service
		Summary
	Chapter 12: Authenticating API Clients
		Preparing for This Chapter
			Creating the JavaScript API Client
		Using Simple Authentication for JavaScript Clients
		Returning Status Code Responses for API Clients
		Authenticating API Clients Directly
			Preparing ASP.NET Core for Direct API Client Authentication
				Enabling CORS
			Adding Authentication to the JavaScript Client
			Testing the Authentication API
		Using Bearer Tokens
			Configuring ASP.NET Core for JWT Bearer Tokens
			Updating the API Authentication Controller
			Specifying Token Authentication in the API Controller
			Updating the JavaScript Client
			Testing Token Authentication
		Summary
Part II: Understanding ASP.NET Core Identity
	Chapter 13: Creating the Example Project
		Creating the Project
		Installing the Bootstrap CSS Framework
		Configuring Razor Pages
		Configuring the MVC Framework
		Configuring the Application
		Testing the Application
		Summary
	Chapter 14: Working with ASP.NET Core
		Preparing for This Chapter
		Understanding the ASP.NET Core Request Flow
			Understanding the Endpoint Routing Middleware
			Authenticating and Authorizing Request Flow
		Understanding Claims
			Adding Claims to a Request
			Assessing Claims
		Improving the Authentication and Authorization
			Signing In and Out of the Application
			Defining Authorization Policy in the Endpoint
				Implementing the Authentication Handler Interface
				Configuring the Request Pipeline
			Moving the Sign-In and Sign-Out Code
			Using HTML Responses
			Using the Built-In Cookie Authentication Handler
		Summary
	Chapter 15: Authorizing Requests
		Preparing for This Chapter
			Creating an Authorization Reporter
			Creating the Report View
			Creating an Endpoint
			Configuring the Request Pipeline
		Understanding Policies and Requirements
			Defining the Custom Requirement and Handler
			Creating and Applying the Policy
			Using the Built-In Requirements
			Combining Requirements
			Restricting Access to a Specific Authorization Scheme
		Targeting Authorization Policies
			Changing the Default Authorization Policy
			Configuring Targeted Authorization Polices
			Using Named Policies
				Creating Named Policies Using the Policy Builder
			Combining Policies to Narrow Authorization
				Creating Policy Exceptions
			Applying Policies Using Razor Page Conventions
			Applying Policies Using MVC Framework Filters
		Summary
	Chapter 16: Creating a User Store
		Preparing for This Chapter
		Installing ASP.NET Core Identity
		Creating an Identity User Store
			Creating the User Class
			Creating the User Store
				Implementing the Data Storage Methods
				Implementing the Search Methods
				Implementing the ID and Name Methods
				Creating the Normalizer and Seeding the User Store
				Configuring Identity and the Custom Services
			Accessing the User Store
				Working with User Store Data
		Adding Optional Store Features
			Adding Support for Querying the User Store
				Querying the User Store
			Adding Support for Storing Email Addresses and Phone Numbers
				Using Email Addresses and Phone Numbers
			Adding Custom User Class Properties
		Validating User Data
		Summary
	Chapter 17: Claims, Roles, and Confirmations
		Preparing for This Chapter
		Storing Claims in the User Store
			Managing Claims in the User Store
		Storing Roles in the User Store
			Managing Roles in the User Store
			Understanding the Role Normalization Pitfall
		Confirming User Contact Data
			Understanding the Confirmation Process
			Creating the Email and SMS Service Providers
			Storing Security Stamps in the User Store
				Updating the Security Stamp
			Creating a Confirmation Token Generator
			Creating the Confirmation Workflow
		Summary
	Chapter 18: Signing In with Identity
		Preparing for This Chapter
		Signing Users In
			Creating the Claims Principal Factory
			Signing Users In
			Configuring the Application
		Signing In Users with Passwords
			Updating the User Class
			Creating the Password Hasher
			Storing Password Hashes in the User Store
			Signing In to the Application with Passwords
		Managing Passwords
			Changing and Recovering Passwords
				Resetting Passwords
				Integrating the Password Features
			Validating Passwords
				Adding Custom Password Validation
			Setting Passwords Administratively
		Summary
	Chapter 19: Creating a Role Store
		Preparing for This Chapter
		Creating a Custom Role Store
			Creating the Role Class
			Creating the Role Store
				Implementing the Data Storage Methods
				Implementing the Name Methods
				Implementing the Search Methods
				Making the Store Queryable
			Seeding the Role Store and Configuring the Application
		Managing Roles
			Validating Roles
				Creating a Custom Role Validator
			Enforcing Role Consistency
		Storing Claims with Roles
			Extending the Role Class
			Extending the Role Store
			Extending the Claims Principal Factory
			Seeding the Role Store with Claims
			Managing Claims
			Displaying Claims
		Summary
	Chapter 20: Lockouts and Two-Factor Sign-Ins
		Preparing for This Chapter
		Enabling Lockouts
			Extending the User Class
			Enabling Lockouts in the User Store
			Managing Account Lockouts
			Configuring Lockouts
			Displaying a Lockout Notification
		Restricting Signing In to Confirmed Accounts
		Using Two-Factor Authentication
			Updating the User Class
			Extending the User Store to Support Two-Factor Authentication
			Managing Two-Factor Authentication
			Signing In with Two Factors
				Creating the Two-Factor Token Generator
				Configuring the Token Generator and Cookie Authentication Handler
				Changing the Password Sign-In Process
				Supporting the Second Factor
				Forgetting the Client
				Testing Two-Factor Sign-In
			Restricting the Scope of Remembered Clients
				Defining an Authorization Failed Landing Page
				Creating the Page and Action Filters
				Applying the Filter to a Page
				Testing the Full Two-Factor Requirement
		Summary
	Chapter 21: Authenticators and Recovery Codes
		Preparing for This Chapter
		Using an Authenticator
			Extending the User Class
			Storing Authenticator Keys in the User Store
			Managing Authenticator Keys
			Enabling Authenticators in Two-Factor Sign-Ins
			Configuring the Application
			Creating the Seed Data
			Setting Up an Authenticator
			Using an Authenticator to Sign In
		Using Recovery Codes
			Storing Recovery Codes
			Seeding the Data Store
			Managing Recovery Codes
			Using Recovery Codes to Sign In
		Summary
	Chapter 22: External Authentication, Part 1
		Preparing for This Chapter
		Preparing for External Authentication
		Implementing the Selection Phase
			Understanding the Preparation Phase
			Understanding the Authentication Phase
			Understanding the Correlation Phase
				Extending the User Store
				Correlating and Storing Logins
		Understanding the OAuth Authentication Process
			Preparing for External Authentication
				Preparing the Simulated External Authentication Controller
				Preparing the Authentication Handler
			Step 1: Redirecting to the Authentication Service URL
				Updating the External Authentication Controller
				Updating the Authentication Handler
			Step 2: Authenticating the User
			Step 3: Receiving the Authorization Code
				Updating the External Authentication Controller
				Updating the Authentication Handler
			Step 4: Exchanging the Authorization Code for an Access Token
				Updating the External Authentication Controller
				Updating the Authentication Handler
			Step 5: Requesting User Data from the Authentication Service
				Updating the External Authentication Controller
				Updating the Authentication Handler
			Completing the External Authentication Process
		Summary
	Chapter 23: External Authentication, Part 2
		Preparing for This Chapter
		Storing Authentication Tokens
			Creating the Simulated External API Controller
			Extending the User Class
			Extending the User Store
			Managing Authentication Tokens
			Storing External Authentication Access Tokens
			Using a Stored Authentication Token
		Adding Support for Real External Authentication Services
			Supporting Google Authentication
				Configuring Application Credentials
				Creating the Authentication Handler
				Configuring the Application
			Supporting Facebook Authentication
				Obtaining Application Credentials
				Creating the Authentication Handler
				Configuring the Application
		Simplifying the Sign-In Process
			Updating the Sign-In Page
			Creating the Password Page
			Adding a GET Handler Method for External Authentication
			Restricting Additional External Authentication
		Summary
Index