In case you have a notification system (different master key), sending links with Employes IDs, what would be the approach? Protect with a specific "RouteValue" on the emails and then do some kind of conversion to the right protected ID expected by the employees system?
Thanks for the video. The encrypted id seems rather long, I wonder if there are options we can pass to control the encryption output like max length, only numbers, etc.
Hello Sir, how I can validate if the value is ok in the route value. for example if I change the route value I get this message "The provided payload cannot be decrypted because it was not protected with this protection provider." Thank you
Hello sir, i have a question. In my application i need to generate the link dynamically in jquery and call the controller with some query string values. I want to encrypt the query string in url. How i can achieve this??? Please help. Waiting for your response. Thanks
I don´t like to have to rename all areas of code where I´m using an ID. I think that must exist a faster and dinamic way to do this, may be to encrypting the Id inside the Proterty Id at Employee class. Thanks for Videos, you are amazing.
This introduced another issue. If an invalid token is placed into the browser address field, the page crashes as protector.Unprotect will not be able to decrypt the token into a string that can be converted into an int. So additional error handling need to be in place.
Sir, It's Amazing series so first thanks a lot to you. Question=> How to get value of CreatedBy or Modified by in Asp.net Core so Can you make one videos of it.
Decryption is working fine on same machine from which encryption occured. But the same code is not decrypting on another machine. Any idea what to do ?
Hi, I need your help. I could modify other user's information, even sensitive information also like password even though I use JWT web token. For ex: * Assume and let's take 2 users registered in ABCD website with the following emails: test1@abcd.com, test2@abcd.com * Now I logged in as Test1 user with his email and password as I expected I received a JWT token. * Then I suspected that, after I logged in with my token, am I able to change other user's details like password. * So I wrote a API function to change other user's password. * Then I called the API and passed the Test2 user's IdentityId, new Password WITH Test1 user's Token, as I suspected, the other user's values were changed.! I wonder! * I confirmed that by getting failed to login with Test2 user's old password. Yes! the new password worked! * What should I do to prevent a user to edit other users' values? I need your answer please. Regards,
![Noob To Max With DRAGON REWORK In Blox Fruits [FULL MOVIE]](http://i.ytimg.com/vi/LnBMOinoOvA/mqdefault.jpg)
I've been wondering how to go about doing this. I was even thinking of using a GUID. Thank you so much, your videos are helpful.
Great explanation! I could implement in Asp Net Core MVC ( .Net6) , just I have made some modification and it works properly! Many thanks!
Sir do you have plan to teach us clean architecture in asp.net core?
Thank you so much.One of my long time question has got answer.
In case you have a notification system (different master key), sending links with Employes IDs, what would be the approach? Protect with a specific "RouteValue" on the emails and then do some kind of conversion to the right protected ID expected by the employees system?
this guy is soooo awesome
🎉nice explained sir ji
Thanks for the video. The encrypted id seems rather long, I wonder if there are options we can pass to control the encryption output like max length, only numbers, etc.
Hello Sir, how I can validate if the value is ok in the route value. for example if I change the route value I get this message "The provided payload cannot be decrypted because it was not protected with this protection provider." Thank you
Very good Explanation sir..
Hello sir, i have a question. In my application i need to generate the link dynamically in jquery and call the controller with some query string values. I want to encrypt the query string in url. How i can achieve this??? Please help. Waiting for your response.
Thanks
I don´t like to have to rename all areas of code where I´m using an ID. I think that must exist a faster and dinamic way to do this, may be to encrypting the Id inside the Proterty Id at Employee class. Thanks for Videos, you are amazing.
That's very helpful video. But i'm wondering how can we hide/shorten the encrypted id on the url.
This introduced another issue. If an invalid token is placed into the browser address field, the page crashes as protector.Unprotect will not be able to decrypt the token into a string that can be converted into an int. So additional error handling need to be in place.
Sir,
It's Amazing series so first thanks a lot to you.
Question=> How to get value of CreatedBy or Modified by in Asp.net Core so Can you make one videos of it.
Thanks for the master piece again. Can we use DP API encryption in asp net core application targeting linux?
Decryption is working fine on same machine from which encryption occured. But the same code is not decrypting on another machine. Any idea what to do ?
LocalMachine ?
XM Lendinh tags last are missing while decoding
Nice Tutorial sir but Can We decrypt it from Angular
?
Thanks
Delete Employee was not applied in this series!!! could you make video for it!!
Thank You
How to encrypt decrypt connectionString and use it
👍
how many more videos in this series?
var maxVideoCount = System.Int64.MaxValue;
Hi, I need your help.
I could modify other user's information, even sensitive information also like password even though I use JWT web token.
For ex:
* Assume and let's take 2 users registered in ABCD website with the following emails:
test1@abcd.com, test2@abcd.com
* Now I logged in as Test1 user with his email and password as I expected I received a JWT token.
* Then I suspected that, after I logged in with my token, am I able to change other user's details like password.
* So I wrote a API function to change other user's password.
* Then I called the API and passed the Test2 user's IdentityId, new Password WITH Test1 user's Token, as I suspected, the other user's values were changed.!
I wonder!
* I confirmed that by getting failed to login with Test2 user's old password. Yes! the new password worked!
* What should I do to prevent a user to edit other users' values?
I need your answer please.
Regards,