Personal Access Tokens (PAT) for Azure DevOps have an expiration date. They can be valid for a year at most. If this expiration date comes closer, Azure DevOps sends you an email with this subject: Azure DevOps personal access token nearing expiration We use PAT to allow our build servers to access our code in …
Sooner or later our Flask application will be on the internet. The earlier we address security issues the better it is. Today we look at a first simple measure to add security headers. This post is part of my journey to learn Python. You can find the other parts of this series here. Attention: The …
As soon as you work with forms you want to validate the user input. Otherwise you collect a lot of garbage in no time. This post is part of my journey to learn Python. You can find the other parts of this series here. Client-side validation A user-friendly approach to form validation is to …
Creating a client-side SSL certificate that you can use to log in on a web site is a challenge. Every part from your certificate to the settings in your web application must work together or you only get an error message. You may have created SSL server certificates without any problems, but believe me, client …
Over the last weeks I had a lot of problems with Git credentials in combination with Azure DevOps. Whenever I worked with a repository, my Git client asked for username and password. It got so annoying that I started to switch to SSH authentication and since then that problem never showed up again. I focus …
As explained in my earlier post, Visual Studio creates a self-signed certificate for your web application that allows you to access your site over HTTPS. If you accidentally remove this certificate, your web application will fail to load and report something like ERR_CONNECTION_RESET on the default error page of your browser: With caching and no …
We use Selenium and Firefox to verify our BDD specifications. That combination worked well until the last update to Firefox 75. Instead of our application on the developer machine, Firefox only showed us the “Your connection is not secure error” overlay. We depend on fast feedback cycles and needed a solution quickly. I found some …
Visual Studio creates a self-signed certificate for your web application that allows you to access your site over HTTPS. As long as you do not need to change anything, this magical configuration works like a charm. Unfortunately, when you need to change something, it is incredibly hard and the magic turns into a curse. …
When we tried our first attempt to disable unsecure protocols, we run into an annoying problem on the servers that run SQL Server. After disabling all the outdated security protocols, we could no longer connect to our databases. The error message was no help at all: We had no other option than to postpone the …
The internet moves on and the next big thing that gets dropped is the support for older versions of TLS (Transport Layer Security). If you not already have done so, now would be a good time to check that your server understands TLS 1.2 and disable the older versions of TLS on your web servers. …