Altairis.Services.LoginApprovals 1.0.0

.NET 7.0 This package targets .NET 7.0. The package is compatible with this framework or higher. 
dotnet add package Altairis.Services.LoginApprovals --version 1.0.0                

                    
                

            
NuGet\Install-Package Altairis.Services.LoginApprovals -Version 1.0.0
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Altairis.Services.LoginApprovals" Version="1.0.0" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
paket add Altairis.Services.LoginApprovals --version 1.0.0                

                    
                

            
#r "nuget: Altairis.Services.LoginApprovals, 1.0.0"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
// Install Altairis.Services.LoginApprovals as a Cake Addin
#addin nuget:?package=Altairis.Services.LoginApprovals&version=1.0.0

// Install Altairis.Services.LoginApprovals as a Cake Tool
#tool nuget:?package=Altairis.Services.LoginApprovals&version=1.0.0

NuGet Status

Altairis.Services.LoginApprovals

This library allows passwordless login to web sites and uses another device to approve given login.

This login method may be quicker and also it's more secure on partially trusted computers. They're secure enough to use a service, but not to type the password.

Big identity providers like Microsoft, Google or Facebook are using similar methods using their authenticator apps. For a smaller project is not practical to write and deploy their custom apps, but the behavior can be done with standard web browser.

Login flow

From the user's perspective the login process is as follows:

  1. User will go to login page and chooses to sign in using another device.
  2. The site displays request ID (ie. B1E2-74D5) and a QR code.
  3. User opens the URL encoded in QR code on a mobile device, where he's already signed in (or will sign in) and verifies the request ID.
  4. User confirms the login.
  5. The original page is refreshing constantly and once the request is approved on mobile device, the user is logged in.

Security risks

  • The user may be tricked into confirming attacker's login with social engineering. In such case is user an idiot and deserves what happens.
  • The login page may be spoofed and the QR code may lead to attacker's site to trick the user to enter their credentials. Usual precautions apply for entering credentials.

Contributor Code of Conduct

This project adheres to No Code of Conduct. We are all adults. We accept anyone's contributions. Nothing else matters.

For more information please visit the No Code of Conduct homepage.

Product Compatible and additional computed target framework versions.
.NET net7.0 is compatible.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last updated
1.0.0 225 8/19/2023
1.0.0-rc1 647 12/18/2018