Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SFI initiative: recommend secure authentication flow #4788

Open
Rick-Anderson opened this issue Aug 23, 2024 · 4 comments
Open

SFI initiative: recommend secure authentication flow #4788

Rick-Anderson opened this issue Aug 23, 2024 · 4 comments
Assignees

Comments

@Rick-Anderson
Copy link
Contributor

Rick-Anderson commented Aug 23, 2024

Type of issue

SFI (Secure Future Initiative)

Description

See this internal link: SFI info in Teams
MSFT wide initiative to recommend the most secure authentication flow. @tdykstra and @Rick-Anderson can PR these.
I'll create an include file something like the following:

Note

This article uses a local database that doesn't require the user to be authenticated. Production apps should use the most secure authentication flow available. For more information on authentication for deployed test and production apps, see [Secure authentication flows](/aspnet/core/security/).

Addresses: dotnet/AspNetCore.Docs#33226
Company wide initiative for ROPC
***After the .NET 9 GA can you make this a priority? ***

Issue or suggestion

ROPC: 35 Files in EntityFramework.Docs

Page URL

https://learn.microsoft.com/en-us/ef/core/miscellaneous/multitenancy

Content source URL

https://github.com/dotnet/EntityFramework.Docs/blob/main/entity-framework/core/miscellaneous/multitenancy.md

Document Version Independent Id

bb29a2b6-c401-287f-2da9-1aeb3c633b41

Article author

@JeremyLikness

@tdykstra
Copy link
Contributor

In the include file, explain why it matters after the sentence about not using a password.

@Rick-Anderson
Copy link
Contributor Author

In the include file, explain why it matters after the sentence about not using a password.

I updated it with your version.

@Rick-Anderson
Copy link
Contributor Author

@roji @ajcvickers please review

@AndriySvyryd
Copy link
Member

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Development

No branches or pull requests

3 participants