4/11/16

AngularJS Logging Client Errors to the Server

AngularJS provides an application exception handling ($exceptionHandler ) service that traps unhandled errors. The default implementation of this service simply delegates the exception to the $log service which just displays the error on the browser console.  As we can imagine, the user does not view these errors, and since the data is not collected, there may be some valuable information that...

4/9/16

Web API OWIN CORS Handling No Access-Control-Allow-Origin Header

XMLHttpRequest cannot load http://localhost:7802/token. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:7812' is therefore not allowed access CodeProject This error means that there is an attempt to access a resource from a...

4/2/16

AngularJS SPA Claims Based Authorization

During this presentation we talk about how an application can read the claims from a JSON Web Token. We also discuss how we need to understand the security specifications for an app to be able to map claims to the different areas of the application. We look at securing the following areas of the application: •        SPA authorization areas –      ...