AspNetCoreMvcAngular

ASP.NET Code MVC Client with Angular View and IdentityServer4

Secured using Cookies, and OpenID Connect Hybrid Flow. Cookies configured with Same site and use Anti-forgery protection. Security headers are also applied.

Blogs

<ul> <li><a href="https://damienbod.com/2017/05/02/using-angular-in-an-asp-net-core-view-with-webpack/">Using Angular in an ASP.NET Core View with Webpack</a></li> <li><a href="https://damienbod.com/2017/05/06/secure-asp-net-core-mvc-with-angular-using-identityserver4-openid-connect-hybrid-flow/">Secure ASP.NET Core MVC with Angular using IdentityServer4 OpenID Connect Hybrid Flow</a></li> <li><a href="https://damienbod.com/2017/05/09/anti-forgery-validation-with-asp-net-core-mvc-and-angular/">Anti-Forgery Validation with ASP.NET Core MVC and Angular</a></li> </ul>

History

<strong>2022-01-28</strong> Updated to .NET 6

<strong>2021-02-17</strong> Updated packages

<strong>2020-12-08</strong> Updated to .NET 5

<strong>2020-09-15</strong> Updated IdentityServer4 to version 4.1.0, nuget, npm packages

<strong>2020-07-03</strong> Updated IdentityServer4 to version 4.0.1, prompt=login bug fix

<strong>2020-06-27</strong> Updated IdentityServer4 to version 4.0.0 and Angular to version 10.0.0

<strong>2020-06-23</strong> Updated Nuget packages, Updating Angular packages

<strong>2020-03-03</strong> Updated STS to support FIDO2

<strong>2020-02-25</strong> Updated nuget packages, npm packages

<strong>2020-01-10</strong> Updated nuget packages, same site fix

<strong>2019-12-21</strong> Updated to .NET Core 3.1 Angular 8.2.14

<strong>2019-09-26</strong> Updated to .NET Core 3.0 Angular 8.2.8

<strong>2019-09-14</strong> Updated to .NET Core 3.0 preview 9, Angular 8.2.6

<strong>2019-08-27</strong> Updated to .NET Core 3.0, Angular 8.2.3

<strong>2019-06-14</strong> Updated to npm, nuget packages

<strong>2019-05-03</strong> Updated to npm, nuget packages, in-process

<strong>2019-03-15</strong> Updated to Angular 7.2.9, .NET Core 2.2

<strong>2018-09-17</strong> Updated to Angular 6.1.7, latest .NET 2.1 packages, updated STS

<strong>2018-06-16</strong> Updated to Angular 6.0.5

<strong>2018-06-16</strong> Updated to ASP.NET Core 2.1

<strong>2017-09-22</strong> Updated to ASP.NET Core 2.0, Angular 4.4.3

Links

https://docs.microsoft.com/en-us/aspnet/core/security/anti-request-forgery

https://stackoverflow.com/questions/46040922/angular4-httpclient-csrf-does-not-send-x-xsrf-token

https://en.wikipedia.org/wiki/Cross-site_request_forgery