.net 4.5.1 Identity 2.0 share authentication between applications - identity

I'm in the process of adding Identity 2.0 to our site redesign. It's running fine as an application under the site root. But the root can't see the authtication, re: HttpContext.Current.User.Identity.IsAuthenticated
I've tried quite a few options (matching machinekeys, etc) with no luck.

I am of view that for single sign on there is a bug in asp.net mvc5.1 templates available. I got the following workaround , For single sign on to work using machine key, One need to add two MVC project with web APi option checked . Then hosted the projects on iis and try single sign on by using the authorize attribute on WEBAPi functions. It is working with me . But i am not able to attain the same behavior with only WEB API based project selection. I am of view that there are bugs in the project selection and they should be address .
If you have other alternate solution using the OWIN based implementation do share .

Related

Can I use Electron JS to convert my web app to DESKTOP app

I have a web app developed using..(PHP,MYSQL,HTML,CSS,JS,AJAX,Datatables, bootstrapjs)
Now, I want to make a desktop version of the same app, and I came across electronjs.
The problem is I dont know whether ELECTRONJS will support all my requirements.
A breif of my requirements:
My app is responsive using datatables.net library including EDITOR for displaying the data .
the datatable plugin requires ajax calls to some API (Which I developed with PHP and hosted on a server)..
but now I want to even do all the DB Operations with electronjs so that my app can work offline.
I am not sure if I can do that with electron
- calling an API (created by same app) from HTML/frontJS
- the API Returns Json data
- the Front JS displays that data on front.
Kindly let me know if this can be done with electronjs,
Well, basically yes. You can build a desktop app like this.
But you wont be able to run it offline if it depends on a server sided API. If you can rewrite your backend Code in JavaScript and use a SQLite DB instead of a MySQL you can run this as electron App.
Keep in mind that your business logic in the frontend can always be abused because it’s not hidden from the user.
FYI: Electron only runs a browser inside it’s own App container. So there is actually no crucial difference between Browser or electron App.

Trusted web activity - Digital assets link validation for intranet/private web app seem to be failing

I've followed this doc to
Create a wrapper Android app based on this sample project for my UI application which runs in non-public domain in our corporate servers.
Add assetlinks.json in my Angular 6 PWA application, with SHA256 fingerprints of my release key.
Deployed the signed apk to a Android 4.4.3 device running Chrome Dev 69 and Google play services - 12.8.74.
When I run the application, everything works fine except hiding the address bar, which makes it as a regular custom tab and not the "Trusted web" content.
I don't see any error in the log and not sure how to debug this scenario. Any help on this is appreciated.
Got confirmation from Chrome team that they are using TWA assets link validation in server side using an API call and so this solution wont work for Private web apps. Said that, they are also considering to move that logic to browser to support this use case. Will update here when I have any update on this.
Update: As of Chrome Version 72, TWA(Trusted web activity) if available in Chrome stable version and the web asset validation(to make sure the web page is yours/same as the app its loaded to) happens in browser. So this solution can be implemented for private web apps for hosting inside enterprise environment.
Also, now PWAs can be packed as regular app using TWA solution and uploaded to Play store as an apk file. Documentation on this is still being updated as per one of Chrome developer. But the solution as such is ready for use.

Firebase Email/Password authentication error TRANSPORT_UNAVAILABLE

I created a basic application using PhoneGap Build that I am trying to implement a simple Email/Password authentication scheme for with Firebase. The authentication works fine in Android, but when I run it on my Windows Phone 8.1 I get the "TRANSPORT_UNAVAILABLE" error returned.
I looked through a lot of stuff on the interwebz, but there really isn't much out there for this kind of thing. So far I have attempted to add the InAppBrowser plugin as suggested in a few places, but that didn't resolve the issue.
The Firebase documentation states "Redirects are not available in PhoneGap / Cordova, or local", but since it works on the same code on the Android I am wondering if that really is the issue.
My next step is going to be implementing the google authentication, but I would prefer to get this fixed instead of having to reengineer that entire portion of my application.
Help me Firebase Support... you're my only hope!

How can i share a wirecloud marketplace between users

I built some widgets and uploaded on my local marketplace, is there a way to share that?
And better is it possible to share a Mashup (the widget composition) without giving the
possibility to wiring to the user?
I mean the user should use an application layout without change anything.
You can make public your workspaces/dashboards following the steps documented in the user guide. Only the owner of a workspace will be able to modify it. I think this is what are you searching for.
Another option is to create a packaged mashup using the "Upload to my resources" option in the editor view:
Take a look to the "Advanced" tab, where you can block widgets (make them unremovable), block connections (make wiring connections unremovable) and embed used widgets/operator (by default packaged mashups depends on the user having installed all the required widgets/operators. This way you can distribute the widgets and operators used by the mashup in the same package).
However, take into account that this method is meant for sharing mashup templates, the user will always be able to add additional widgets and create new connections in the wiring view.
Once packaged, mashups/dashboards (and widgets and operators) can be uploaded to a WStore server (e.g. to the Store portal provided on FIWARE Lab) for sharing them with other users. The steps for making this is also described in the WireCloud's user guide.
I have the problem, revisited.
I have set up a working Marketplace instance (v2.3) but am unable to integrate it with Wirecloud. The marketplace is correctly registered but all the requests i am making to this Marketplace are throwing 502 error, even though i am actually able to see some results when querying the Marketplace server through a browser.
Indicatively, i can issue a GET command at http://:8080/FiwareMarketplace/v1/registration/stores/ and get an answer, but Wirecloud's internal APIs return a 502 (Bad Gateway).
Any idea on what might have gone wrong?
PS: This happens for WC v0.6.5. When upgrading to a newer (Beta) version of WC, everything seems to be performing as expected, i.e. the marketplace is correctly inserted and the stores are correctly retrieved and processed.

Lotus Notes integration with a Java Portal Platform

I am using a Java based Portal Platform. I need to show within my portal information stored in Lotus Notes. Considering security issues, what are the recommended ways to do this?
Are there any open source JSR 168 portlets out there that integrate with Lotus Notes?
From my portal platform, I can call web services to get this information. Is this recommended? If so where can I find information about web service API´s available for Lotus Notes?
Are there any java components that I can install on my portal platform that will make available a java API to access Lotus Notes information?
You have two main options.
First you can talk to Domino (Notes is the client, Domino is the server) directly using the CORBA java interface over IIOP. This will give you full access to the Domino object model and allow you to write the code to do whatever it is you need to do in your java platform.
Secondly you could go over web services. This will be much easier to set up, but you will have to deploy code for what ever it is you want to do on the Domino server. In ND7 and up Domino will build all the web service elements for you from a WSDL or method stub.
From a security point of view, the user connecting to the service will need to be authenticated with Domino. This could be a system account or the actual user if you can proxy the login through.
Another angle I've seen is to just proxy HTTP calls through the portlet to Domino.
Assuming you have SSO setup between portal and domino the simplest solution is to use the Notes View Portlet included with portal. If you need to show the data in a more customized format then I would suggest to use portlet factory. If neither of the previous work for you then you should be able to develop a custom portet using RAD and the notes java api.