📢 .NET 10 is here, but what about security? 🤔 In this post, we explore missing security features in #dotnet 10 and discover how Duende Software fills the gaps for Token Management, DPoP, Blazor, and OAuth 2.0 Introspection! duende.link/q13yifc

Today, let's look into a crucial "defense-in-depth" mechanism: SameSite cookies. Learn how this powerful browser flag can add an extra layer of protection against Cross-Site Request Forgery (CSRF) attacks. Strengthen your #aspnetcore web applications! youtu.be/goQlKiynWXU #dotnet

We built our own JWT Decoder tool, available at jwt.me! 🧐 Quickly inspect and validate your JSON Web Tokens. It features automatic public key (JWK) retrieval, inline claim explanations, and presenter mode. Read all about it: duende.link/387skhq #OAuth #OpenIDConnect #JWT #TokenValidation #dotnet

Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript. We'll see why you want to use BFF & how this pattern makes secure API access less cumbersome youtu.be/pSTMCyQH_E4 #dotnet

With the .NET 10 LTS released, now is the time to look into upgrading #IdentityServer4 to Duende IdentityServer! Fix known vulnerabilities and future-proof your security. Get support, FAPI 2.0 compliance, and more. duende.link/uwo974g #IdentityServer4 #OAuth2 #OpenIDConnect #dotnet

Heads up, #dotnet developers! 🚀 .NET 10 is a great time to upgrade your application and its dependencies. In this post, we look at key .NET 10 breaking changes you need to know about for a smooth upgrade. 👉 duende.link/89qegla #aspnetcore

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution. Longread ahead! 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore

Finally, #dotnet 10 is here! Here are the new capabilities and features we are excited about. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. 👀 duende.link/qet4wp9 #aspnetcore

The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere. What about subdomains? Or multiple domains? In this post, we'll explore some options. duende.link/igeq87f #dotnet #security #passkeys #webauthn

In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web applications for years. Learn what CSRF is, how it works, and how to defend against it in #aspnetcore youtu.be/WUJrKw05YfI #dotnet

Congratulations Microsoft with the #dotnet 10 release! devblogs.microsoft.com/dotnet/annou... Who's upgrading, when? (We're on it for our SDKs)

📢 .NET 10 is here, but what about security? 🤔 In this post, we explore missing security features in #dotnet 10 and discover how Duende Software fills the gaps for Token Management, DPoP, Blazor, and OAuth 2.0 Introspection! duende.link/q13yifc

Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn

What are Best Practices of Web Application Security in 2025? This post focuses on key security and authentication flows using OAuth 2.0 and OpenID Connect, flows to avoid, security measures to implement, and IETF Best Current Practices. duende.link/iyqe3fk #security #dotnet

Brace yourself, w̶i̶n̶t̶e̶r̶ #dotnet 10 is coming! ⛄️ Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. duende.link/qet4wp9 #aspnetcore

In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web applications for years. Learn what CSRF is, how it works, and how to defend against it in #aspnetcore youtu.be/WUJrKw05YfI #dotnet

Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐 In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more! youtu.be/7_OzM1c-STk #dotnet

Heads up, #dotnet developers! 🚀 .NET 10 is a great time to upgrade your application and its dependencies. In this post, we look at key .NET 10 breaking changes you need to know about for a smooth upgrade. 👉 duende.link/89qegla #aspnetcore

Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript. We'll see why you want to use a BFF & how this pattern makes secure API access less cumbersome youtu.be/pSTMCyQH_E4 #dotnet #identity #aspnetcore

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore

Great livestream a couple of weeks ago with .NET MVP Tore Nestenius: Demystifying Authentication in #aspnetcore Core A hands-on, clearly explained deep dive into the world of authentication. Recommended watch! www.youtube.com/watch?v=8tZQ... #dotnet #security #identity

The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere. What about subdomains? Or multiple domains? In this post, we'll explore some options. duende.link/igeq87f #dotnet #security #passkeys #webauthn

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet #aspnetcore

Passwordless authentication is gaining momentum. The upcoming release of #dotnet 10 comes with built-in passkey support! In this post, we look at the new #Blazor project template and how it adds secure authentication using passkeys. duende.link/37egw9f #identity #passkey #webauthn #aspnetcore

Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn

The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere. What about subdomains? Or multiple domains? In this post, we'll explore some options. duende.link/igeq87f #dotnet #security #passkeys #webauthn

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn

Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐 In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more! youtu.be/7_OzM1c-STk #dotnet

Discover a key update in #dotnet 10 that improves local development! 🔥 In this blog post, we explain how a new TLS certificate and unique local domains can solve cookie conflicts and better mimic production environments. duende.link/arbgu89 #aspnetcore #security

The Duende livestream is starting now! Custom Authentication in #aspdotnet Core with Elin & Robert from Active Solution 🕐 Starting now (10:00 EST / 16:00 CEST) Join us on YouTube ➡️ www.youtube.com/watch?v=o0MC... #dotnet #security #identity

The Duende livestream starts in one hour! Custom Authentication in #aspdotnet Core with Elin & Robert from Active Solution 🕐 In one hour! (10:00 EST / 16:00 CEST) Join us on YouTube ➡️ www.youtube.com/watch?v=o0MC... #dotnet #security #identity

Less than 1 day until our livestream. Don't miss: Custom Authentication in #aspdotnet Core Go beyond the built-in authentication handlers in ASP.NET and learn about a RemoteAuthenticationHandler. Register now 👉 t.co/jgxpGooTE7 #dotnet #security #identity

Passwordless authentication is gaining momentum. The upcoming release of #dotnet 10 comes with built-in passkey support! In this post, we look at the new #Blazor project template and how it adds secure authentication using passkeys. duende.link/37egw9f #identity #passkey #webauthn #aspnetcore

Our next livestream with Active Solution is coming up soon! Custom Authentication in #aspdotnet Core Go beyond the built-in authentication handlers in ASP.NET and learn about a RemoteAuthenticationHandler. Register 👉 t.co/jgxpGooTE7 #dotnet #security #identity

The server's origin is used to generate passkey credentials, making them resistant to phishing. A credential signed for one app can't be used elsewhere. What about subdomains? Or multiple domains? In this post, we'll explore some options. duende.link/igeq87f #dotnet #security #passkeys #webauthn

Recording of our livestream with .NET MVP Tore Nestenius is now available on YouTube. Demystifying Authentication in #aspnetcore Core Take a hands-on deep dive into the world of authentication. www.youtube.com/watch?v=8tZQ... #dotnet #security #identity

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐 In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more! youtu.be/7_OzM1c-STk #dotnet

We're at #DEVintersection #NextGenAIConf #CyberIntersect ! Stop by and register to win a Lego T-Rex dinosaur fossil set and meet the Duende team. Learn more about Duende #IdentityServer v7.3 with FAPI 2.0. #dotnet #security #identity

Let's explore the world of OpenID Connect with a focus on claims, scopes, and how Duende IdentityServer facilitates authentication in #dotnet applications. Learn how apps request necessary claim information! 👩🏼‍🏫 duende.link/j28b2bw #security #identity #aspnetcore

If you're attending #DEVintersection #NextGenAIConf #CyberIntersect, stop by and meet Joe, Khalid, and Wesley at the Duende Software booth. They can answer your questions and discuss .NET #identity, Duende IdentityServer, and #BFF. You can also register to win a T-Rex lego set!

Passwordless authentication is gaining momentum. The upcoming release of #dotnet 10 comes with built-in passkey support! In this post, we look at the new #Blazor project template and how it adds secure authentication using passkeys. duende.link/37egw9f #identity #passkey #webauthn #aspnetcore

Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript. We'll see why you want to use a BFF & how this pattern makes secure API access less cumbersome youtu.be/pSTMCyQH_E4 #dotnet #identity #aspnetcore

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution. Longread ahead! 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore

Guests Elin Fokine and Robert Folkesson host our next livestream. Building Custom Authentication in #aspdotnet Core Learn what a RemoteAuthenticationHandler is, how it extends the ASP.NET authentication pipeline, and why you might build your own. Register at: duendesoftware.com/webinars/bui...

#dotnet 10 is coming! Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. 👀 duende.link/qet4wp9 #aspnetcore

Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐 In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more! youtu.be/7_OzM1c-STk #oauth #oidc #dotnet #identity

Recording of our livestream with .NET MVP Tore Nestenius is now available on YouTube. Demystifying Authentication in #aspnetcore Core Take a hands-on deep dive into the world of authentication. www.youtube.com/watch?v=8tZQ... #dotnet #security #identity

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution. Longread ahead! 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore