security.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "# Session\n",
    "\n",
    "Utilisé dans les applications web classiques, l'état de l'utilisateur est stocké côté serveur. Le serveur stocke ces données pour l'application dans un cookie.\n",
    "\n",
    "## OAuth vs session\n",
    "\n",
    "OAuth scale mieux puisque l'état est stocké côté client contrairement à la session qui est avant tout côté serveur.\n",
    "\n",
    "## Token JWT (Javascript Web Token)\n",
    "\n",
    "\n",
    "\n",
    "# Côté client\n",
    "\n",
    "## Installation de la librairie Auth0\n",
    "\n",
    "```\n",
    "npm install --save @auth0/auth0-angular\n",
    "```\n",
    "\n",
    "## Create authentication module\n",
    "\n",
    "```javascript\n",
    "import { BrowserModule } from '@angular/platform-browser';\n",
    "import { NgModule } from '@angular/core';\n",
    "\n",
    "// Import the module from the SDK\n",
    "import { AuthModule } from '@auth0/auth0-angular';\n",
    "\n",
    "@NgModule({\n",
    "  imports: [\n",
    "    BrowserModule,\n",
    "    AuthModule.forRoot({\n",
    "      domain: 'xxxxx.eu.auth0.com',\n",
    "      clientId: 'xxxxxxxxxxxxxxxxx'\n",
    "    }),\n",
    "  ],\n",
    "  exports: [\n",
    "    AuthModule\n",
    "  ]\n",
    "})\n",
    "export class AppAuthenticationModule {}\n",
    "```\n",
    "\n",
    "## Import de l'authentication module\n",
    "\n",
    "Importez ensuite le module AppAuthenticationModule dans votre AppModule.\n",
    "\n",
    "```javascript\n",
    "imports: [\n",
    "  // .... other modules\n",
    "  AppAuthenticationModule,\n",
    "],\n",
    "```\n",
    "\n",
    "# Côté API\n",
    "\n",
    "## Ajouter le service d'authentification\n",
    "\n",
    "```csharp\n",
    "builder.Services\n",
    "    .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)\n",
    "    .AddJwtBearer(options =>\n",
    "    {\n",
    "        options.Authority = \"https://xxxxxxxxxxxxx.eu.auth0.com\";\n",
    "        options.Audience = \"https://localhost:44459\";\n",
    "        options.RequireHttpsMetadata = false;\n",
    "        options.TokenValidationParameters = new TokenValidationParameters\n",
    "        {\n",
    "            NameClaimType = ClaimTypes.NameIdentifier\n",
    "        };\n",
    "    });\n",
    "```\n",
    "\n",
    "## Mettre à jour le pipeline HTTP\n",
    "\n",
    "```csharp\n",
    "app.UseAuthentication();\n",
    "app.UseAuthorization();\n",
    "```\n",
    "\n",
    "## Protéger un controlleur\n",
    "\n",
    "```csharp\n",
    "[Authorize()]\n",
    "public class WeatherForecastController : ControllerBase\n",
    "```"
   ]
  }
 ],
 "metadata": {
  "language_info": {
   "name": "python"
  },
  "orig_nbformat": 4
 },
 "nbformat": 4,
 "nbformat_minor": 2
}