| |
browse.develop.com
Browse.develop.com is a community that was established to collect and
organize valuable web information. Our technical staff have selected and
indexed information and courses that they feel will help you stay
current on best practices across the SDLC.
|
8 Articles match "Access Control","Restful"
| Related DevelopMentor Courses | MORE | | Essential Windows Communication Foundation 4 Training Furthermore, WCF has a built-in throttling engine to control the load on your services as well as support for stateful services. REST REST is a different architectural style for building services. REST embraces HTTP as an application protocol and URIs to address resources. You will learn the fundamentals of REST as well as how to leverage WCF's web programming model to implement Rest-ful ideas in an efficient way - including serialization, content negotiation, and caching. You'll get answers to these questions: How do I design services using contracts? DevelopMentor Courses - Tuesday, March 1, 2011 Windows Azure Platform: Cloud Computing for.NET Developers In this module you will learn about the underlying concepts like the service model, the fabric controller and the idea of roles and instances. This module covers the basic architecture of SQL Azure, how to deploy your existing databases and demonstrates how to write code to access SQL Azure. Day 3 Windows Azure AppFabric Access Control Even with the power of claims and federation, it is still not trivial to add support for multiple federation protocols or identity providers right into the application. Security token services play a central part in making this happen. DevelopMentor Courses - Wednesday, February 22, 2012 Essential Windows Identity Foundation Windows Azure & the Azure AppFabric Access Control Service Microsoft provides a multi-tenant security token service as part of the Azure platform cloud offering. Another advantage of the Access Control Service is, that it allows easy integration of both the "enterprise" protocols like WS-* as well as "web identities" like LiveID, Google or Facebook into your applications. Traditional protocol like Kerberos work remarkably well for single trust domain intranet situations, but have their shortcomings once the scenarios become a little bit more complex. ?xml:namespace DevelopMentor Courses - Wednesday, February 22, 2012 |
10 Articles match "Access Control","Restful"
| The Latest from DevelopMentor | MORE | | HTML5 and Cross-Origin Resource Sharing call One of these contains a simple JSON action method and both sites call this same controller action method to retrieve the JSON and display it. The minimum we need to do is add the Access-Control-Allow-Origin header to let the browser know HTML pages originating from which site can request this data. If you want to allow everyone access you can simply specify “*”, alternatively you can specify a specific domain. 3: Response.AddHeader( "Access-Control-Allow-Origin" , "*" ); 4: return Json( new. You can get far more control though. Maurice de Bejeir - Thursday, November 17, 2011 HTML5 and Cross-Origin Resource Sharing call One of these contains a simple JSON action method and both sites call this same controller action method to retrieve the JSON and display it. The minimum we need to do is add the Access-Control-Allow-Origin header to let the browser know HTML pages originating from which site can request this data. If you want to allow everyone access you can simply specify “*”, alternatively you can specify a specific domain. 3: Response.AddHeader( "Access-Control-Allow-Origin" , "*" ); 4: return Json( new. You can get far more control though. The Problem Solver - Thursday, November 17, 2011 Need WIF Training? The course includes extensive lab material where you take standard application and apply all kinds of claims and federation techniques and technologies like WS-Federation, WS-Trust, session management, delegation, home realm discovery, multiple identity providers, Access Control Service, REST, SWT and OAuth. Outsourcing Authentication: Windows Azure & the Azure AppFabric Access Control Service. I spend numerous hours every month answering questions about WIF and identity in general. Or contact me directly! The course outline looks as follows: Day 1. Day 2. www.leastprivilege.com - Wednesday, November 9, 2011 | -
| The Best from DevelopMentor | MORE | - Access Control Service: Walkthrough Videos of Web Application, SOAP, REST and Silverlight Integration
Part 3 – REST Service and Client. This part shows how to set up a WCF REST service that consumes SWT tokens from ACS. Unfortunately there is currently no standard WIF plumbing for REST. The Silverlight Client shows ho to sign in to the application using a registered identity provider (including web identities) and using the resulting SWT token to call our REST service. Over the weekend I worked a little more on my ACS2 sample. Instead of writing it all down, I decided to quickly record four short videos that cover the relevant features and code. Have fun ;). watch. www.leastprivilege.com - Tuesday, May 24, 2011 - Access Control Service: Passive/Active Transition Sample
In addition to the existing front ends (web [WS-Federation], console [SOAP & REST], Silverlight [REST]) and error handling , it now also includes a WPF client that shows the passive/active transition with a SOAP service as illustrated here. All the ACS interaction is encapsulated in a WPF user control that: retrieves the JSON feed. triggers the sign in via a browser control. Here you can find my updated ACS2 sample. displays a list of supported identity providers. retrieves the token response. All you need to supply is the ACS namespace and the realm. Have fun! www.leastprivilege.com - Thursday, June 23, 2011 - Access Control Service: Protocol and Token Transition
var swtToken = Helper.GetSimpleWebToken(samlToken); var client = new HttpClient ( Constants.BaseUri); client.SetAccessToken(swtToken, WebClientTokenSchemes.OAuth); // call REST service with SWT. popular example would be how to call a REST/SOAP service using e.g. a LiveId login. ACS v2 supports a number of protocols (WS-Federation, WS-Trust, OpenId, OAuth 2 / WRAP) and a number of token types (SWT, SAML 1.1/2.0) – see Vittorio’s Infographic here. Some protocols are designed for active client (WS-Trust, OAuth / WRAP) and some are designed for passive clients (WS-Federation, OpenID). www.leastprivilege.com - Tuesday, June 21, 2011 - Guide to Claims-based Identity and Access Control (2nd Edition)
We added a lot of content around ADFS, Access Control Service, REST and SharePoint. This fell through the cracks over the summer holiday time: The 2nd edition of the Patterns & Practices “claims guide” has been released. This is excellent! All source code is available as well! Grab it from: [link]. Or use my vanity URL: [link]. IdentityModel www.leastprivilege.com - Friday, October 28, 2011 - Access Control Service: Transitioning between Active and Passive Scenarios
application, you would host a browser control and use the above URL to trigger the right series of redirects. All the browser controls support one way or the other to register a callback whenever the window.external.notify function is called. When you selected the SWT token format in ACS – you can use that token e.g. for REST services. As I mentioned in my last post, ACS features a number of ways to transition between protocol and token types. One not so widely known transition is between passive sign ins (browser) and active service consumers. Let’s see how this works. www.leastprivilege.com - Wednesday, June 22, 2011 - HTML5 and Cross-Origin Resource Sharing call
One of these contains a simple JSON action method and both sites call this same controller action method to retrieve the JSON and display it. The minimum we need to do is add the Access-Control-Allow-Origin header to let the browser know HTML pages originating from which site can request this data. If you want to allow everyone access you can simply specify “*”, alternatively you can specify a specific domain. 3: Response.AddHeader( "Access-Control-Allow-Origin" , "*" ); 4: return Json( new. You can get far more control though. The Problem Solver - Thursday, November 17, 2011 - Need WIF Training?
The course includes extensive lab material where you take standard application and apply all kinds of claims and federation techniques and technologies like WS-Federation, WS-Trust, session management, delegation, home realm discovery, multiple identity providers, Access Control Service, REST, SWT and OAuth. Outsourcing Authentication: Windows Azure & the Azure AppFabric Access Control Service. I spend numerous hours every month answering questions about WIF and identity in general. Or contact me directly! The course outline looks as follows: Day 1. Day 2. www.leastprivilege.com - Wednesday, November 9, 2011 %>
| |   |
