Web Development, Microsoft Sessions

T07 The New ASP.NET Authorization and Data Protection Stacks


11:15am - 12:30pm

Level: Intermediate

Barry Dorrans

Security Czar, ASP.NET


With the advent of ASP.NET v5 we’ve taken the opportunity to throw away the old, bad things and drag code kicking and screaming into 2015. As part of this we killed [Authorize(Users=)] and replaced it with something more flexible, more configurable and claims aware. We finally got rid of machine key as well, and have replaced it with something that rotates keys, syncs across instances of Azure websites and could even use an NTFS share or a database as a key store. By the end of this session you should be prepared to bring in the new and improved bits to help you make your apps more flexible and more scalable.