Questions tagged [identity]
The identity tag has no usage guidance.
52 questions
0
votes
0
answers
63
views
Utilising Social Logins via OAuth2 in native mobile apps
This question has been asked over and over again, but I have not yet found a satisfying answer:
How to use Social Logins (via OAuth2) to obtain access tokens for your backend if your only clients are ...
- 9
0
votes
0
answers
83
views
Avoiding conflicts with Microsoft Two-factor authentication across multiple web applications help
I'm designing a web application and using Microsoft's out of the box Identity and its default Two-Factor Authentication (with Asp.net core MVC and .NET 8). While setting up and testing the 2FA ...
- 147
0
votes
6
answers
302
views
is employee just a user in domain driven design
Suppose I have an application where I can manage clients (just companies I offer my services to) and what services I offer for them. I also have the functionality to create timebookings, which means I ...
- 140
2
votes
1
answer
69
views
Azure Managed Identity and Zero Trust
Azure Managed Identity provides a mean to only allow explicitly defined users/apps to access a given resource. For instance I can setup that no-one can access my database except the Managed Identities ...
1
vote
1
answer
72
views
Persistant Browser Display Settings for Users
I have a question about what's the best approach to handle persistent data for web apps.
I have a web app that is authenticating through an auth service. once authenticated it makes requests to the ...
- 13
1
vote
0
answers
161
views
OpenID Connect and User Management Best Practices
Currently my company has 2 applications that use Identity Server for SSO. Not every client we have uses both applications but some do. The part I'm uneasy about is that both apps have a user ...
- 146
0
votes
2
answers
1k
views
Obtaining application generated ID from repository or from entity constructor?
In the Book "Implementing Domain-Driven Design" the author suggests to implement a repository method to provide the next application-generated (not database-generated) ID. Like so:
class ...
- 876
6
votes
1
answer
1k
views
Should user and service-to-service authentications be separate?
Say I have a system with 5 microservices behind a gateway, and a user signs in through an IDP (OAuth)
A user U passes the access token in a request, and the call first reaches the gateway before it ...
- 171
0
votes
2
answers
291
views
Extend the ApplicationUser class or use a Person class?
I am making a web system using Asp.Net Core with individual user accounts (Identity), and I was thinking about how I should store the users' personal information in the database.
The system will have ...
- 131
1
vote
0
answers
36
views
Two step provisioning using OIDC and AD?
A client requested that we implement the following authentication/authorisation flow:
User authenticates using OIDC via a IAM (Salesforce in this case).
If user is an external user, then a flag is ...
- 33
2
votes
1
answer
124
views
How to randomly allocate a set of IDs digitally, one ID per person, such that everyone knows that the particular allocations are kept private?
I have a set of UUIDs that I want to assign to a set of people. I want to deliver these UUIDs to people in a secure manner, such that everyone knows that I do not know which UUID corresponds to which ...
- 31
1
vote
2
answers
1k
views
Composite Id based on another Aggregate root?
An Aggregate Root should always have a unique ID within the bounded context. Typically the examples one finds use a GUID for this to ensure global uniqueness.
However consider a bounded context for a ...
- 59
-3
votes
1
answer
1k
views
Where to save user information with an IAM like Keycloak
What is the best practice to save user informations like firstname,lastname, address...? Directly in the Keycloak db or in the application database and the identifier from the keycloak user will also ...
- 13
1
vote
1
answer
152
views
Checking validity of users and tenants in each request
I am designing a centralized IDP to use for a database-per-tenant application that uses a "tid" (Tenant Id) claim in the access token that the WebAPI uses to create a connection string ...
- 13
-1
votes
1
answer
366
views
Is there a naming convention for variables that hold one of several possible ids?
Sorry if this is a silly question, but I am not a native english speaker and a lot of times it is difficult for me to come up with meaningful variable names.
I have a table of users in our app. All ...
- 115
1
vote
4
answers
118
views
How can I store an user's capabilities to boost performance while allowing real-time updates of said capabilities?
I'm ingesting 150 objects that each require an user capabilities check, the function isUserAdmin tells me whether or not an user is an admin or not. Inside this function, there's a lot of deeper ...
- 85
1
vote
0
answers
310
views
Is ASP.NET Core Identity a leaky abstraction?
As far as I know, the DBContext or underlying persistance technology should be only contained inside the Data layer.
Also, it feels very wrong to me to have identity package inside the user ...
- 11
4
votes
1
answer
182
views
Architecture to lock account to mobile device
I'm currently creating a mobile app and have the following issue.
I am required to only allow the user to login from a device that is registered to the users account. A user can have up to X number of ...
1
vote
0
answers
3k
views
How to support anonymous user in web application?
I work for a publishing company that also provides content distribution to their users. In order to access a piece of content the user must be entitled to do so. Traditionally this authorization check ...
- 27
2
votes
1
answer
935
views
Client (app-server) vs DB generated unique ID's
I've been reading on instagram's approach to generate unique identifiers.
Besides remaining content I'd like to understand on of the points their making as a con of client-generated (by client I mean ...
- 123
4
votes
1
answer
378
views
User management: third party Identity Management vs local user
Context
Let's considering a standard web application handling cars. Each car has an owner. So the car structure looks like:
cars(
id INTEGER PRIMARY KEY,
...
owner_id *???*
)
For simplicity ...
- 141
2
votes
2
answers
566
views
How to design ID code system for people database?
We are restructuring our entire database / filesystem / user identity system. As a first step, we have determined that we need to assign each user/employee in an organization unique ID. Surprisingly ...
- 139
1
vote
1
answer
221
views
Microservices - External access tokens stored in identity service, calendar service, or both?
I'm creating an application which, so far, has an identity service(using identityserver4), a front end, and a calendar service.
The user logs in via third party(say, google) and grants permissions to ...
- 121
11
votes
2
answers
6k
views
Which data should be stored as `Claim`?
In ASP.Net Core, I find Claims authorization is very not-concrete method. We can add anything as ClaimType and ClaimValue pair; groups, firstname, lastname, brithdate, canAccessThisURI, isEditor, etc.....
1
vote
2
answers
339
views
Which approach use when admin can act as some user in application?
The application requires that admin user can provide same actions like real user. It is normal situation when in application changes IIdentity so that when we click to button "Login like some user" ...
- 179
3
votes
2
answers
2k
views
Best practices in saving user data when using identity provider like AWS Cognito
So in my mind, the usual users table that we are used to having, is going to split in two:
whatever data is within the Identity Provider
the domain specific data (user.facialHairStyle) is going to ...
- 131
1
vote
0
answers
554
views
Multi-Tenant & Multi-Object Permision Suggestions
I am looking for suggestions/examples on how to setup permissions for my project.
I am using ASP.NET Core 2.0 with EF Identity 2 (on one server) and will be using IdentityServer4 (secondary server) as ...
- 111
3
votes
4
answers
4k
views
ASP.NET Projects using too much .NET Boilerplate Libraries / Code
I am very puzzled with the obsession that many people seem to have with using Microsoft frameworks. I have seen several tutorials and projects (both open and closed source) that seem to utilize all of ...
- 508
5
votes
3
answers
3k
views
Why do RESTful services that implement HATEOAS provide a self-relationship link?
I'm learning about HATEOAS and I noticed that every implementation always seems to implement a self-relationship first. For example a common response object might look like
{
title: "The Wonderful ...
0
votes
2
answers
432
views
Is this a constant or a variable?
I was wondering if a value that is defined by the user at the start of a program, and not modified by the program, is considered a constant or a variable. I know that a constant is a word/letter that ...
- 111
1
vote
1
answer
4k
views
How does Entity Framework track object with identity as key
I want to understand how EF track ID when the primary key is identity. (DB first)
For example
class User
{
int Id; //auto generated via SQL identity, also the primary key of the table Users.
...
- 177
7
votes
4
answers
569
views
email address as username, and email address field
I'm designing an entity to represent a log-in object. The unique username value is an email address, that will go onto the username field.
Should I add a second field called email to indicate a ...
- 753
2
votes
1
answer
182
views
What should be taken into consideration when creating a Sku framework?
I have to design a Stock-Keeping Unit (SKU) for my downloaded products and I am looking for any advice on how to choose a standard.
More specifically, I would like to know:
Are there any character ...
- 3,623
0
votes
2
answers
330
views
What does GRAPH stand for in the term Azure AD Graph API or Facebook Open Graph API
I'm doing some research on authentication methods and I've noticed that not only does Azure call their cloud Active Directory interface API the "Graph API" but also Facebook use the same term with ...
- 323
1
vote
1
answer
893
views
Databaseless ASP.NET MVC 5 on top of an external REST API
Where you would envision an out-of the-box ASP.NET MVC 5 web application on top of an MSSQL database, I have now been placed in a situation where I'm supposed to use custom external token endpoints ...
- 823
4
votes
1
answer
752
views
Identity propagation using Azure service bus
We currently have a platform with a SOA architecture in which the user's identity is propagated from the web application via middle tier services (REST and SOAP) until we actually query our data ...
- 861
3
votes
0
answers
1k
views
Single sign-on flow using ASP.NET MVC + Active Directory
I'm looking into creating a single-sign-on portal built in ASP.NET MVC. This single sign on portal should give users the option to sign in with their individual account (which should be verified ...
- 291
16
votes
1
answer
12k
views
Separating ASP.NET IdentityUser from my other entities
I have a ProjectName.Core library containing all my business logic and my entities and their behaviour. There's currently no relation whatsoever to Entity Framework or any other DAL because I like to ...
- 291
1
vote
1
answer
21
views
Resource representation can depend on identity?
If some resource on a RESTful api is to be protected, we can do it by using OAuth for example, and then if the there's no token on the headers of the request (i.e. no identity) we return a 401 status ...
- 4,957
6
votes
1
answer
180
views
When we say a monad 'encapsulates a computation' - is this just saying 'wraps a functional transformation of data'?
When I think of the word 'computation' - my mind jumps to lambda calculus or operations on a state machine representing a CPU. It is quite a broad definition.
Now some people talk about monads as '...
- 4,839
2
votes
1
answer
2k
views
Single Identity for Desktop and Web [closed]
I'm building a system has both a WPF desktop application as well as an Asp.net MVC application.
I need a common user identity component so that user can log on to either one with the same credentials....
- 33
4
votes
1
answer
2k
views
Use a custom value object or a Guid as an entity identifier in a distributed system?
tl;dr
I've been told that in domain-driven design, an identifier for an entity could be a custom value object, i.e. something other than Guid, string, int, etc. Can this really be advisable in a ...
- 1,820
1
vote
1
answer
7k
views
Identity matrix using Fortran 95
The following code give the identity matrix of any size the user wish it to be:
program identitymatrix
real, dimension(:, :), allocatable :: I
character:: fmt*8
integer :: ms, j
print*,'the ...
- 121
4
votes
3
answers
5k
views
Is it possible to check a client side application identity from server side? [duplicate]
Assume there is a web service which is visible publicly but it must be just responsive to a specific client application. Is there any mechanism to check client side application identity to prevent ...
- 143
1
vote
3
answers
5k
views
Auto - incremental ID in Domain Object
I read a lot about auto-incremental id (guid, interlocked.increment, ObjectIdGenerator...) but don't find nothing for my situation.
In my domain model user ask to have an automatic progressive ...
- 131
4
votes
1
answer
397
views
Identity Design ASP.NET
I am trying to design a system with the below features, and am currently trying to figure out best way to handle Identity :
There will be multiple decoupled parts of the system, with same customers ...
- 401
3
votes
1
answer
4k
views
Is it safe to use LAST_INSERT_ID() in a system like Point of Sale
Is it safe to use LAST_INSERT_ID() in a system using MySQL like Point Of Sale when there are multiple users using the system at the same time?
- 171
99
votes
8
answers
67k
views
Is browser fingerprinting a viable technique for identifying anonymous users?
Is browser fingerprinting a sufficient method for uniquely identifying anonymous users? What if you incorporate biometric data like mouse gestures or typing patterns?
The other day I ran into the ...
- 1,093
4
votes
6
answers
14k
views
Best practices for generating new identifiers for persistent objects?
In a typical scenario, an object that needs to be persisted in the database will be created in application code without an identifier, and later saved to a table in the database. Some database ...
- 738
36
votes
5
answers
13k
views
Is it a bad idea to sell Android apps in the Android Market under your real name? [closed]
I'm just getting started in Android development and am working on a few small "practice" apps. As an example, one is a live wallpaper. The others are similar in terms of development effort. When ...
- 798