News for hackers. Stuff that matters.
Re:Rapidly Build SaaS apps on ASP.NET/ServiceStack based on ... by 1cvmask on Tuesday April 06, 2021 @05:37PM (#26717689)
How can one add a mfa solution like saas pass to this? Or do you add it?
Re:Rapidly Build SaaS apps on ASP.NET/ServiceStack based on ... by TriNetra on Tuesday April 06, 2021 @11:33PM (#26720318)
Yes you can integrate with any provider. the pipeline [0] is the enforcement part – performing MFA checks like "Is MFA enabled on user? is it applicable for this request (can be turned off for programmatic api-based access, for example) etc."

It's the job of the application to prompt caller for 2FA input and verify it using the provider/device of your choice.

But to save you time even with that implementation, ASPSecurityKit has a category of products called source packages, which provide full implementation of several commonly needed functionality, including 2FA workflow [1], installed right into your project as source code, so you can switch to any MFA provider easily by modifying the code that sends MFA token to the device.

0: https://aspsecuritykit.net/docs/article/the-security-pipelin...

1: https://aspsecuritykit.net/docs/article/source-packages/?pac...

Re:Rapidly Build SaaS apps on ASP.NET/ServiceStack based on ... by abgr-y on Tuesday April 06, 2021 @10:14PM (#26719846)
https://aspsecuritykit.net/features/#mfa, ASPSecurityKit mentions it can integrate with different token providers and Saas Pass has custom integration via API as well