Sem.Authentication
1.0.0
dotnet add package Sem.Authentication --version 1.0.0
NuGet\Install-Package Sem.Authentication -Version 1.0.0
<PackageReference Include="Sem.Authentication" Version="1.0.0" />
paket add Sem.Authentication --version 1.0.0
#r "nuget: Sem.Authentication, 1.0.0"
// Install Sem.Authentication as a Cake Addin #addin nuget:?package=Sem.Authentication&version=1.0.0 // Install Sem.Authentication as a Cake Tool #tool nuget:?package=Sem.Authentication&version=1.0.0
This library provides some "tools" for dealing with authentication like MVC attributes to add another authentication factor when accessing specific MVC actions.
The purpose of this project is to provide tools for an MVC application developer to ease some tasks in the field of authentication and authorization.
What problems does it solve?
In web applications you face issues like getting a 2nd factor of authentication for specific actions or preventing the usage of attack tools like havij. This library provides you with easy to use ASP.Net MVC attributes to handle such challenges.
Current feature list:
Attribute based additional authentication factor for MVC controller actions
The attribute "YubikeyCheck" validates a YubiKey (http://www.yubico.com/) token string and redirects to a specific page if the token is not valid (list of users that are allowed to authenticate via YubiKey can be configured inside an XML file). If you have a different 2nd factor, you can inherit from an abstract base class “AuthenticationCheck” that does provide some of the “infrastructure” for such a check.
Attribute based throttling of requests from one client
The attribute "MinimumRequestTimeDistance" allows to set a minimum of time between two requests from a single client for a specific controller action. With the attribute "FastRequestsProtection" you can specify how many requests per second can be issued from one client (this allows the client to issue "n" requests simultaneously, but then the client has to wait). Both attributes will lower the effectiveness of automated attack tools that mostly rely on a mass of requests issued in short time.
Product | Versions Compatible and additional computed target framework versions. |
---|---|
.NET Framework | net45 is compatible. net451 was computed. net452 was computed. net46 was computed. net461 was computed. net462 was computed. net463 was computed. net47 was computed. net471 was computed. net472 was computed. net48 was computed. net481 was computed. |
-
- YubicoDotNetClient (>= 1.0.0)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
Version | Downloads | Last updated |
---|---|---|
1.0.0 | 4,797 | 1/11/2014 |