Andrea Chiarelli

Senior Developer Advocate

I have over 20 years of experience as a software engineer and technical writer. Throughout my career, I've used several languages and technologies for the projects I was involved in, ranging from C# to JavaScript, ASP.NET to Angular and React. Recently I'm mainly focusing on Identity and API design, especially in the .NET ecosystem.

Andrea Chiarelli

All posts

security

Security and Web Development

.NET

Securing Razor Pages Applications with Auth0

The Confused Developer

URL, URI, URN: What's the Difference?

Actions

Migrating Auth0 Hooks to Auth0 Actions

.NET

Securing Blazor WebAssembly Apps

.NET

What is Blazor? A Tutorial on Building Web Apps with Authentication

HTTPS

Using HTTPS in Your Development Environment

The Confused Developer

Encoding, Encryption, and Hashing

Actions

Country-Based Access with Auth0 Actions

Actions

Managing Trial Periods with Auth0 Actions

Actions

Customize User Registration Experience with Auth0 Actions

The Confused Developer

Forbidden, Unauthorized, or What Else?

.NET

Add Authentication to Your ASP.NET Core MVC Application

The Confused Developer

Permissions, Privileges, and Scopes

.NET

.NET 6 Highlights

.NET

Role-Based Authorization for ASP.NET Web APIs

.NET

Exploring the Auth0 ASP.NET Core Authentication SDK

The Confused Developer

ID Token and Access Token: What's the Difference?

.NET

Permission-Based Security for ASP.NET Web APIs

.NET

Building ASP.NET CRUD Web APIs

.NET

Authorization for ASP.NET Web APIs

.NET

Secrets Management in .NET Applications

.NET

Five C# Features You Might Not Know

.NET

What is .NET? An Overview of the Platform

.NET

.NET Core vs .NET Framework vs .NET Standard: A Guided Tour

.NET

How to Create Your .NET Project Template

.NET

Using C# Extension Methods for Auth0 Authentication

HTTPS

Preventing HTTPS Downgrade Attacks

Vulnerabilities

Managing Third-Party Assets Security Risks in Your Web Apps

.NET

Five Things You Should Know About .NET 5

Clickjacking

Clickjacking Attacks and How to Prevent Them

CSRF

Prevent Cross-Site Request Forgery (CSRF) Attacks

Ecosystem

Auth0 Marketplace: Add Identity Proofing to Your Applications

XSS

Defend Your Web Apps from Cross-Site Scripting (XSS)

JavaScript

JavaScript: What's New in ECMAScript 2020

.NET

Using xUnit to Test your C# Code

.NET

Securing gRPC-based Microservices in .NET Core

.NET

Understanding Dependency Injection in .NET Core

JavaScript

Beyond JavaScript Frameworks: Universal Login Button Component