glm94/secure-core
1
0
Fork 0
Code Issues 9 Pull Requests Releases Wiki Activity

Commit Graph

  • f5ee2f68b9 Changed the settings getting functions to accept a fll key path instead of only a Section / Key pair. Changed the placement of the pepper in the password hashing function to be in complicance with the OWASP's recommendation for using a pwpper. main glm94 2021-03-29 19:15:15 -05:00
  • 9b283b31f4 Tweaked the SessionManager's IsSessionTokenValid function to accept a connection string to standardize the interfaces on all the SessionManager functions. glm94 2021-03-10 21:52:52 -06:00
  • baf2518fe8 Updated the way application settings are loaded and added some intialization functions to the various manager classes to load and validate all the user supplied options at start up instead of constantly reevaluating them over the course of the application's runtime. glm94 2021-03-10 21:27:19 -06:00
  • 3d3b9c1e68 Updated the project's framework to .NET 5 and changed its launch configuration to no longer pop a browser on startup. glm94 2021-03-10 15:03:02 -06:00
  • 59a5733d4e Minor update to the SQL to make sure the Activity Log gets the correct stored procedure name. glm94 2021-03-09 22:33:19 -06:00
  • 7008621799 Added code to support password settings. Fixed a bug where the [FromBody] attribute resulted in null object properties, as well as included more null checks. glm94 2021-03-09 22:14:29 -06:00
  • 70bb9dd9e2 Added the template SQL script to build the database, functions and stored procedures. glm94 2021-02-08 14:06:19 -08:00
  • debb4ebc61 Added some minor tweaks, and set up the EmployeeController to be usable by a frontend to see how well all this works so far. glm94 2021-01-15 14:21:40 -06:00
  • 5a9d3621fe Added more validation to the various AuthController functions. glm94 2021-01-15 09:41:35 -06:00
  • 8e9824f497 Attempted to clean up the AuthController just a tad. glm94 2021-01-14 15:48:52 -06:00
  • 6f8b7af78e Added and tested the password reset feature. So far so good, needs some more validation but its working and that's a good first step. glm94 2021-01-13 16:41:20 -06:00
  • e198838a32 Cleaned up and refactored the code to make things much easier to understand. glm94 2021-01-13 11:24:19 -06:00
  • 4721a70ea7 Updated the PasswordManager to check for a min password length as that might be a tad important. glm94 2021-01-12 21:28:11 -06:00
  • 4e25410d30 Updated the password validation and created a username validation function. glm94 2021-01-12 20:12:38 -06:00
  • c2297ed368 Fixed a bug when returning the password reset link, forgot to URL encode the token.. glm94 2021-01-08 10:52:10 -06:00
  • d495bfca9c Added the first part of allowing the user to reset their password. glm94 2021-01-08 00:00:58 -06:00
  • fb61c971e9 Updated the Startup.cs to forward headers, hopefully this will help with making sure remote IPs are correctly retrieved. glm94 2021-01-05 21:52:09 -06:00
  • 9d70df80f1 Minor code clean-up. glm94 2021-01-04 00:25:25 -06:00
  • 45dceef75e First attempt at getting a little meta data on the client. Included a value for peppering all password hashing functions. glm94 2021-01-04 00:20:35 -06:00
  • e03610e390 Started to try and organize all the authentication code. glm94 2021-01-03 22:09:36 -06:00
  • ddb42da7bb Added basic auth checking code. First bit of code to protect an API call in the Employee controller. glm94 2021-01-03 18:44:08 -06:00
  • 26ea8e8cbc Updated the Login code so it responds with a set-cookie header for the session token. Still looking into if this is the right thing to do however. glm94 2021-01-03 02:36:36 -06:00
  • e8454fb652 Moved the authentication code to its own dedicated class. Minor code cleanup. glm94 2021-01-02 15:31:52 -08:00
  • a955fc5346 Cleaned up the hashing code. glm94 2021-01-01 13:08:29 -08:00
  • 5621418bd7 Added password and session creation functions. glm94 2021-01-01 13:29:10 -08:00
  • 26c59555ab Intial commit. THe bare bones of a REST .NET Core app have been made. glm94 2021-01-01 00:57:07 -08:00