Uwierzytelnianie i autoryzacja w ASP - materiały

Authentication - Uwierzytelnianie to proces identyfikacji i weryfikacji użytkownika aplikacji internetowej. Aplikacja internetowa stara się rozpoznać, kto jest użytkownikiem.

Authorization - Autoryzacja jest procesem, który przychodzi po uwierzytelnieniu i oznacza, że ​​aplikacja sprawdza, czy użytkownik ma prawo dostępu do części aplikacji internetowej.

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Informacje ogólne:

• ASP.NET Security
• Authentication in ASP.NET: .NET Security Guidance
• Authentication and Authorization in ASP.NET 
• Autoryzacja w ASP.NET 
• Designing Application-Managed Authorization 
• 70-562: Securing Your Site
• ASP.NET Web Application Security
• An Overview of Authentication and Authorization Options in ASP.NET 
• Uwierzytelnienie i autoryzacja w aplikacjach ASP.NET
• ASP.NET Authentication
• Authentication in ASP.NET
• Website User Authentication - ASP.NET 4 Web Applications
• How To Implement Forms-Based Authentication in Your ASP.NET Application by Using C#.NET
• Authentication in ASP.NET (IIS 6.0)
• Authentication Element (ASP.NET Settings Schema)

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
ASP.NET wspiera co najmniej 4 rodzaje uwierzytelniania są to:

1. Windows authentication - na podstawie loginu i hasła z systemu windows

• Windows Authentication
• Windows Authentication Provider - .NET Framework 4
• Windows Authentication Provider in ASP.NET (IIS 6.0) 
• How To: Use Windows Authentication in ASP.NET 2.0
• Explained: Windows Authentication in ASP.NET 2.0
• User registration and authentication for an ASP.NET 2.0 webs
• ASP.NET 3.5 Windows-Based Authentication 

2. Forms authentication (which ASP.NET membership uses) - wpisywane w formularzu loginu i hasła, które jest przechowywane np. w bazie danych

• Forms Authentication
• Forms Authentication Configuration and Advanced Topics 
• Forms Authentication in ASP.NET 3.5 Tutorial
• An Overview of Forms Authentication 
• Simple Forms Authentication
• Explained: Forms Authentication in ASP.NET 2.0
• Using ASP.NET Forms Authentication - video
• Forms Authentication Provider
• Using Forms Authentication in ASP.NET 
• Dissecting Forms Authentication
• Using Forms Authentication with Microsoft Ajax
• Walkthrough: Using Forms Authentication in ASP.NET MVC
• Mixing Forms and Windows Security in ASP.NET
• Using Forms Based Authentication in ASP.NET for Static Content (Doc Files, PDF Files etc.) 
• Supporting HTTP Authentication and Forms Authentication in a Single ASP.NET Web Site 
• How To: Protect Forms Authentication in ASP.NET 2.0
• How To: Use Forms Authentication with Active Directory in ASP.NET 2.0
• How To: Use Forms Authentication with SQL Server in ASP.NET 2.0
• How To: Use Windows Authentication in ASP.NET 2.0
• How To: Use Membership in ASP.NET 2.0
• Role Providers
• ASP.NET Membership 
• Wstęp do ASP.NET Membership Provider 
• Managing Users by Using Membership
• Membership and Roles
• Membership and Role Providers in ASP.NET 2.0
• Examining ASP.NET's Membership, Roles, and Profile
• How to Create SQL Membership Schema at Run-Time
• Understanding the Forms Authentication Ticket and Cookie

3. Passport authentication- za pomocą usługi paszportów oferowaną przez Microsoft

• Passport Authentication Provider

4. Anonymous access - ograniczenie dla wybranych stron/folderów

• Preventing Anonymous Access to Web Sites in ASP.Net

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Przykładowe projekty:

• Windows Authentication Using Form Authentication
• Basic authentication in ASP.NET against custom datasource
• Windows Authentication
• Authenticate User by Roles in ASP.NET
• OpenID With Forms Authentication
• Role-based Security with Forms Authentication
• Custom Authentication provider by implementing IHttpModule, IPrincipal and IIdentity
• ASP.NET Forms Authentication for Specific Objects
• ASP.NET - Forms authentication user impersonation
• Custom Membership Providers
• Multi-User Login and Authentication Code
• Forms Authentication Without Password In ASP.NET
• An Overview of Forms Authentication 
• Using Basic Forms Authentication in ASP.NET 

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------