Brock Allen
where else to find them
no profile links on file
what they talk about
where they keep going back
- NDC London2 editions2017–2018
- NDC Oslo2 editions2017–2019
- NDC Minnesota2 editions2018–2019
all 4 in the filters
on a stage with
who talks about the same things
- Dominick Baier31 talks
- Anders Abel14 talks
- Roland Guijt7 talks
- Tobias Ahnoff8 talks
- Nahid Farrokhi3 talks
- Barry Dorrans8 talks
| title | conference | date |
|---|---|---|
| Securing Web APIs from JavaScript/SPA Applications | NDC Oslo 2019 | 2019-06-17 |
Explains concrete patterns: use OpenID Connect + OAuth2 to get an ID token (for UI) and an access token (for APIs), prefer the authorization code flow with… | ||
| Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0 | NDC Minnesota 2019 | 2019-05-06 |
Covers concrete ASP.NET Core features: Kestrel edge support and HTTPS, the data protection key rolling demo (keys persisted as XML, default 90‑day rotation… | ||
| .NET Rocks Live | NDC Porto 2019 | 2019-02-26 |
Practical answers for real integration: desktop apps achieve single sign‑on by launching the system browser SSO (GitHub for Windows example) so shared cookies… | ||
| Building Clients for OpenID Connect/OAuth 2-based Systems | NDC Porto 2019 | 2019-02-26 |
Walks through concrete client patterns: use authorization header for API calls, prefer code flow with PKCE over implicit, store access tokens in secure OS… | ||
| Securing Web Applications and APIs with ASP.NET Core 2.2 and 3.0 | NDC Porto 2019 | 2019-02-26 |
Overview of concrete mechanics: shows how ASP.NET Core uses an external key store and data protection keys stored outside app with automatic key rotation (new… | ||
| Implementing authorization in web applications and APIs | NDC Minnesota 2018 | 2018-05-07 |
Authentication is easy, authorization is hard — so separate identity tokens from permission decisioning and map users to roles and permissions per application… | ||
| IdentityServer for ASP.NET Core 2 | NDC London 2018 | 2018-01-15 |
IdentityServer4 adapts to ASP.NET Core 2 by replacing the old auth plumbing with dependency-injected handlers so a single middleware picks the default scheme… | ||
| Implementing Authorization in Web Applications and APIs | NDC London 2018 | 2018-01-15 |
A prototype becomes a production-ready authorization system that separates identity from permissions, arguing identity tokens must not carry app-specific… | ||
| Implementing authorization in web applications and APIs | NDC Oslo 2017 | 2017-06-14 |
Argues that puting permissions into signed tokens fails for changing permissions and ambiguous meanings, and builds a prototype authorization provider as an… | ||
| IdentityServer4: New & Improved for ASP.NET Core | NDC London 2017 | 2017-01-16 |
IdentityServer4 ports IdentityServer3 onto ASP.NET Core, replacing the old Katana hosting with Kestrel/self-hosted console apps and swapping the custom factory… | ||
| Building JavaScript and mobile/native Clients for Token-based Architectures | NDC London 2017 | 2017-01-16 |
Demonstrates building JavaScript and native clients that talk to IdentityServer using OpenID Connect/OAuth2, with concrete code using oidc-client.js for SPAs… | ||
| nothing matches | ||