The best solution architects do not work in isolation. They validate their ideas with peers and experts. Join the conversation and validate your designs with the best in the industry. Apply here: duende.link/insiders #dotnet #aspnet #aspnetcore

Passkeys. Built-in MFA. One-Time Passwords. Audit trails. 🔐 See how Duende User Management is replacing the complexity of ASP.NET Identity with a crafted, integrated foundation. Join the live preview: duende.link/78q3hk #dotNet #aspnet #aspnetcore #IdentityServer

We’ve shipped patch releases across our library stack to address transitive NuGet vulnerability warnings related to CVE-2026-26127 in Microsoft.BCL.Memory. More details: duende.link/nx6127 #dotnet

Passkeys. Built-in MFA. One-Time Passwords. Audit trails. 🔐 See how Duende User Management is replacing the complexity of ASP.NET Identity with a crafted, integrated foundation. Join the live preview on March 24th: duende.link/78q3hk #dotNet #aspnet #aspnetcore #identityserver

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn more: duende.link/2swrhhw #dotnet #aspnet #aspnetcore

SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. Learn More: duende.link/appmodb #aspnet #dotnet

Nothing is more frustrating than a tool that fights you. We respect your expertise. Our architecture gives you the control to build exactly what you need, without the black-box limitations that make work a headache. Learn More: duende.link/appmodb #aspnet #aspnetcore #dotnet

Want the power of Duende IdentityServer but with faster time-to-value? ⏱️ We’re previewing a first-party user management .NET SDK on March 24th that gives you Passkeys, MFA, and audit trails out-of-the-box. Keep your data control, ditch the custom coding. RSVP: duende.link/78q3hk

Authentication on a different device from the one you're using? 🧐 Learn how to implement Client-Initiated Backchannel Authentication (CIBA) in #ASPNETCore and #dotnet: duende.link/3ysz4u Especially helpful in high-trust scenarios.

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn More 👉️ duende.link/is74b0b #aspnet #aspnetcore #dotnet

The best optimization is the one you don't write. Upgrading to .NET 10 delivers throughput gains purely through runtime improvements. Get a "free" boost by updating the package. Learn More: duende.link/bpicb #aspnet #dotnet

Identity is hard. Building it alone is harder. 🤝 Join our private Insiders Discord to talk BFF, Passkeys, and OpenTelemetry with the Duende team and senior devs worldwide. A no-fluff zone for mission-critical systems. Apply: duende.link/insiders

The Duende Product Insiders program is our dedicated listening channel. We share early design documents and prototypes with the Duende Insiders to get honest and impactful feedback. Help us build the solutions that empowers you and your peers. Apply here: duende.link/insiders

Licensing isn't just legal paperwork; it’s a safety net for your team. Knowing that Duende engineers are maintaining the Identity SDK allows you to focus on what you love building. We carry the weight of standards and compliance so you don't have to: duende.link/appmodb #aspnet #dotnet

Content Security Policy (CSP) helps against cross-site scripting attacks! 🥷 Learn how this powerful HTTP header is your next line of defense. We break down the directives and show you how to implement them. Watch here: youtu.be/B0Rz_qiQAWo #dotnet #securitytips

Standards evolve because people participate. Insiders help shape the roadmap. When we prototype new features, we ask the community how they fit real-world architectures. Apply: duende.link/insiders #aspnet #dotnet

Nothing is more frustrating than a tool that fights you. We respect your expertise. Our architecture gives you the control to build exactly what you need, without the black-box limitations that make work a headache. We empower the security architect. Learn more 👉️ duende.link/appmodb #aspnet

Null exceptions are costly. We are enforcing strict Nullable Reference Types across the IdentityServer API in .NET 10. The compiler catches bugs before you deploy. The community deserves rigorous design. Learn More: duende.link/bpicb #aspnet #dotnet

Should you add rate limiting to your Duende IdentityServer deployment? 🤔 Our new article breaks down the why (and why not), plus 3 implementation options. Read the full article 👉 duende.link/87wrkjh #dotnet #ASPNETCore #OAuth #OpenIDConnect

The livestream starts NOW! 🔴 Security you can’t prove isn’t security, it’s hope. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 Join us now: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

Join our livestream in 1 HOUR! 📣 JWTs are the industry standard, but are they right for your specific architecture? We’re breaking down the strategic trade-offs between JWTs vs. Opaque Tokens. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

.NET 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn more: duende.link/bpicb #aspnet #aspnetcore #dotnet

Tomorrow! Join our livestream on March 3rd. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

Stability is a community asset. Aligning with the Microsoft LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. Learn More: duende.link/is74b0b #aspnet #dotnet #LTS

JWTs are the industry standard, but are they right for your specific architecture? We’re breaking down the strategic trade-offs between JWTs vs. Opaque Tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

Expand your security lingo with our latest article on JWT (JSON Web Token), pronounced "jot"! 🍪 Learn what a JWT is, and its role in OAuth 2.0/OpenID Connect: duende.link/q2nage #dotnet #securitylingo

Stability is a community asset. Aligning with the Microsoft LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. Learn more: duende.link/bpicb #aspnet #dotnet #LTS

SaaS providers are black boxes. Duende gives you full source access. Step-through to understand exactly how it all works. 🔍️ Explore: docs.duendesoftware.com/identityserv... #aspnet #dotnet

Identity is hard. Building it alone is harder. 🤝 Join our private Insiders Discord to talk BFF, Passkeys, and OpenTelemetry with the Duende team and senior devs worldwide. A no-fluff zone for mission-critical systems. Apply: duende.link/insiders #IdentityServer #DotNet

DPoP is not shorthand for Danish pop music. 🎶 Instead, Demonstrating Proof of Possession (DPoP) is used to fight back against token replay attacks in OpenID Connect and OAuth. Security Lingo Explained: duende.link/lgodpop #SecurityLingo #dotnet

Stop saying "It's probably DNS" when things go south. 🧭 Fix it faster, and learn why the professional networking community favors dig over nslookup for DNS troubleshooting: duende.link/y26224 #dotnet #dns

Should you blindly trust JWTs for accessing APIs? 😟 You’ve got OAuth 2.0 and #JWT's, but a single misconfiguration in your library can leave you wide open. Join Wesley to see why "standard" validation isn't always enough. 🔗 Be there on March 3rd: duende.link/lsjwt26b #OAuth2 #DotNet

Nothing is more frustrating than a tool that fights you. We respect your expertise. Our architecture gives you the control to build exactly what you need, without the black-box limitations that make work a headache. We empower the security architect. Learn More: duende.link/appmodb #aspnet

#dotnet 10 performance benefits everyone. By optimizing IdentityServer for the new runtime, we pass those gains down to every application that relies on us. Reduced CPU cycles in auth mean lower cloud bills for the entire community. Learn more: duende.link/is74b0b

Don't rely on status pages during an outage. Commercial licenses include priority support. 🤝 Direct assistance from the maintainers is a necessity for mission-critical infra. #aspnet #dotnet Learn More:

Stability is a community asset. Aligning with the Microsoft LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. 💪 #aspnet #aspnetcore #dotnet

Cross-Site Scripting (XSS) is one of the most common web attacks! 💥 Learn the 3 types (Reflected, Stored, DOM-based), the main developer mistake, and how to defend your app with #ASPNETCore and proper HTML escaping. youtu.be/Zqvw6XR9Lug #XSS #WebSecurity #dotnet

Duende Software's latest Open Source Sponsorship goes to #BenchmarkDotNet! 🚀 It's a great project to help analyze (and maintain) performance of #dotnet code. Check out the full post for details on the project: duende.link/o55bmd

Security you can’t prove isn’t security, it’s hope. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

Your best defense is collective knowledge. The Insiders' community acts as a radar for emerging .NET security and identity trends. Don't wait for the blog post; define best practices with us today. Apply: duende.link/insiders #aspnet #dotnet

Secure your #ASPNETCore APIs! 🛡️ Learn how to integrate OAuth/OpenID Connect with JWT Bearer tokens, generate an OpenAPI spec, and secure calls from your #SwaggerUI using Duende IdentityServer. duende.link/4tqhgh4 #dotnet #webdev

Cookies are essential for web applications, but did you know they can be vulnerable to JavaScript attacks? In this video, we look at the HttpOnly flag and show you how to protect your cookies from malicious JavaScript access! youtu.be/ZMDBX9T8Z7o #SecurityTips #dotnet

Demystifying the security lingo: Encode vs. Encrypt vs. Hash! 🤯 Do you know the difference between converting a string, protecting a secret, and securing a password? We break down these three security terms in our new post: duende.link/y26217 #dotnet #SecurityLingo

JWTs are the industry standard, but are they right for your specific architecture? We’re breaking down the strategic trade-offs between JWTs vs. Opaque Tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

OpenID Connect signing key rotation is an essential part of modern security 🔒 We break down the technical & compliance requirements, and how Duende IdentityServer's automatic key management ensures zero-downtime rotation. duende.link/yhwsz42 #OpenIDConnect #OAuth2 #dotnet

Expand your security lingo with our latest article on JWT (JSON Web Token), pronounced "jot"! 🍪 Learn what a JWT is, and its role in OAuth 2.0/OpenID Connect: duende.link/q2nage #dotnet #securitylingo

JWTs are the industry standard, but are they right for your specific architecture? We’re breaking down the strategic trade-offs between JWTs vs. Opaque Tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

Stability is a community asset. 💪 Aligning with the Microsoft #LTS schedule provides a shared timeline for the industry. We can all plan, budget, and coordinate releases together. Predictability helps the whole community function better. Learn More: duende.link/5pwbntg #aspnet #dotnet

The Duende Product Insiders program is our dedicated listening channel. We share early design documents and prototypes with the Duende Insiders to get honest and impactful feedback. Help us build the solutions that empowers you and your peers. Learn more: youtube.com/shorts/nTnaq... #aspnet

We build better software when we listen. Product Insiders is our listening channel. We share early designs to get direct feedback. Help us build the tools you need. Apply Today: duende.link/insiders #aspnet #aspnetcore #dotnet