Adding a self-hosted captcha alternative to ASP.NET Identity

Sooner or later your public facing ASP.NET Identity form will be targeted by illicit actors and you will start getting sign-ups from john.doe1231@gmail.com but they never click the email verification link or use the service. My best guess this is either to warm up spam sending email addresses with legitimate email traffic or to disqualify … Continue reading Adding a self-hosted captcha alternative to ASP.NET Identity →

A more beautiful based ASP.NET Identity UI based on TailwindCSS and Preline

I think it's often take for granted that the default ASP.NET project template gives you Authentication, User Management, SSO and Two Factor Support out-of-the-box with minimal extra setup. One thing that always bothered me was that compared to other software starter kits the built-in UI looked like ... well ... a developer made it. There … Continue reading A more beautiful based ASP.NET Identity UI based on TailwindCSS and Preline →

Azure Key Vault – Add Custom Role for Deployment Access Only

In our previous article Azure Resource Manager Templates – Securing your Parameters with KeyVault we have used KeyVault to safely store production secrets. In large teams you may have multiple people deploying resources but don't want to give them access to the actual secrets inside the vault. You can achieve this by creating a custom role that … Continue reading Azure Key Vault – Add Custom Role for Deployment Access Only →

Azure Resource Manager Templates – Using Certificates from KeyVault in AppServices

Certificates have various uses in AppServices. The most obvious one is to enable SSL for your application. Another use it to authenticate towards Azure KeyVault to retrieve confidential values. In this post we will be uploading a certificate to KeyVault. Then we will deploy it to an AppService with Azure Resource Manager. Finally we will … Continue reading Azure Resource Manager Templates – Using Certificates from KeyVault in AppServices →

Azure Resource Manager Templates – Securing your Parameters with KeyVault

Storing secret information such as parameters in resource template files is not recommended. Often ARM templates are checked into source control. Now everyone has access to your confidential information. Using parameters that are not checked into source control is one option. Azure offers a better option through it's secure data store KeyVault. Think of it … Continue reading Azure Resource Manager Templates – Securing your Parameters with KeyVault →