Maarten Balliauw {blog}

You can use passkeys as a second factor after password login in ASP.NET Core Identity on .NET 10. Register a two-factor token provider for users who have a passkey, then add two endpoints: one creates passkey request options for the user who passed the password check, and the other verifies the passkey before completing sign-in. Store the user id from the password step in a short-lived cookie, and compare it with the passkey’s user before signing in.

Starting today, I will try to regularly post some information about myself, my job, my life, my opinions. Some of my colleagues at work, mainly Joris, told me I should start a blog too. He has his blog hosted at Blogspot, but I really wanted to host it myself.

2 weeks ago, my previous computer died. A black screen with a white blinking cursor was the only thing it still did. Curious about that, I opened the case and saw… leaking capacitors. According to Google searches about that, something went wrong with industrial espionage a few years ago. Nice, I had spied capacitors and a dead computer. Even more typical was the fact that my warranty had expired 2 years ago. And that all in a week I planned to develop on my blog and some other private projects. The best cure to quicly get to work: a new computer.

Earlier this week, BillS has posted some information on how to run PHP on the upcoming IIS 7. To be honest, it’s quite similar to installing it onto IIS 6 but with a few steps less. But I have a warning to add… PHP is added as an ISAPI extension, which binds to the multi-threaded IIS worker process. Unfortunately, not all PHP extensions are thread-safe… Registering the PHP as a CGI is better, but decreases performance.

A while ago, I was experimenting with the Zend Framework. At first, I tried running a small sample on top of IIS, but unfortunately, that did not work… On Apache, it worked like a charm. Very nice, but what do you do when your site runs on an IIS machine?