The agents are hammering GitHub.

Data sovereignty has been a thing forever. Technology sovereignty is the thing, now.

"I'm so forward looking I can't remember what I achieved last year" lmao

CDKTF was garbage anyway.

Seems that none of the stores in Netherlands have had any stock of Guinness for several weeks now. Christmas is RUINED.

Is F# still a thing?

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet #aspnetcore

Completed Halo CE split screen with daughter last week. Guess we'll be doing it again. :)

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

Been fun digging into Passkeys lately. Starting a 4-post series... #dotnet #aspnetcore #identity duende.link/p455k3y

I'm hiring! Looking for an #aspnetcore dev, ideally with identity/oidc experience. Role is support, tech presales, advisory, docs, ... East coast US ideally for timezone overlap in the team Small team and company, big ambition. Reach out if you're interested! duendesoftware.com/careers/cust...

SQL Server on arm64 is a bit of a hot mess for devs eh.

If there are only 12 months between STS and LTS what's the point? This means we'll be producing packages supporting four SDKs 8, 9, 10 for a period leading into 11. A brief period yes, but still.

How is nancyfx.org website still running lol

Are AI agents beholden to RTO policies?

We're hiring! At @duendesoftware.com, we're looking for someone to join our Customer Success team. It's a 100% remote position but we are looking for someone based in the US East Coast region for time zone reasons. If you're interested, visit duendesoftware.com/careers/cust... for details! #hiring

Our docs website went down with TLS certificate errors for no discernable reason. Deleting and recreating the custom domain in azure static websites fixed it. Thanks Azure.

"Microsoft’s CoreAI team is a new engineering group led by former Meta executive Jay Parikh" Fucking Meta lol. GitHub enshitifcation starts now.

The enshitification of GitHub begins.

Know someone who would benefit from attending my OAuth 2.0 and OIDC training for free? Nominate them! Do you want the free seat yourself? Ask someone to nominate you!

Just ruined the start of my vacation ffs.

No s-pen support galaxy fold 7. 😤 Been a user of since the first Note. 13 years of upgrades since. Deal breaker. No buy.

Interesting question by @damian.social - What are you using for user management in #aspnetcore? #dotnet github.com/orgs/DuendeS...

It’s probably not a very popular opinion but teamwork requires a disproportionate amount of effort compared to solo work. Communication overhead, differences of opinions, alignment, etc. suck so much energy out of the individual experience. It’s rare to read up on any of that.

How I got involved in the Backend for Frontend (BFF) spec? @philippederyck.bsky.social built a demo to show how insecure single-page applications can be! Full interview: youtu.be/urS9wstmN2U More on Backend for Frontend: duende.link/bff #dotnet #security #bff #oauth2

Interesting time to have the entirety of NATO leadership in town.

lmao www.reddit.com/r/Experience...

This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications. Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcore

In recent weeks, some of our customers reported performance degradations. You won't believe what happened next 😱 Clickbait aside, #efcore, SqlClient, and transient retries don't always go well together. More on our blog! duende.link/1khti3w #dotnet #identityserver #azure

Microsoft.Data.SqlClient is such a tire fire of a package lol

Just did a big rewrite of a docs page on dynamic identity providers in @duendesoftware.com #identityserver. That was fun to dive in, and makes me appreciate the thought put in to designing both #aspnetcore and IdentityServer itself. docs.duendesoftware.com/identityserv... #dotnet #security #oauth

Been studying AspNet Identity and... I don't like it. Not one bit. That UserManager is an absolute beast. Service location, dubious non-transactional operations, exception based flow of control etc. My inner DDD is screaming.

Kicking off our Open Source Sponsorship program this quarter, where our developers picked a project we'll sponsor for 12 months: 🙌 Shouldly Assertion Framework We're using it ourselves, and here's why you may want to: duende.link/w4whryh #dotnet #testing

Using VSCode Agent mode (Copilot, Sonnet3.7) I attempted to "vibe" code a small library to handle the Cache-Status header (RFC9211) in C#/AspNetCore to see what all the fuss was about. It was a disaster. Used/retained zero of the output.

Fresh Duende.AccessTokenManagement release candidate! 🔑 Named keys for IDistributedCache injection 💸 HybridCache (preview) 📊 Open Telemetry metrics, logs and traces 🏕️ Externalized cache key generation 🎉 and more! github.com/DuendeSoftwa... #dotnet #oidc #security

Secure your #VueJS apps with OpenID Connect & the BFF pattern! 🔒 We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together. duende.link/eshdrq4 #Security #OAuth2 #OpenIDConnect #dotnet

Companies won't do shit mate.

Reviving LibLog as a commercial product BRB.

A common attack web devs need to guard against is Cross-Site Request Forgery (CSRF). 🦸‍♀️ Anti-Forgery tokens to the rescue! Let's see how they work in more detail 👇 duende.link/wk7e6sg #dotnet #aspnetcore

Most expensive laptop ever?

Blogged: Creating provenance attestations for NuGet packages in GitHub Actions andrewlock.net/creating-pro... In this post I discuss software provenance, what attestations are for, how they work, how to create an attestation for a NuGet package, and why that doesn't really work😅 #dotnet #security

Youtube comment's 'topics' has to be the dumbest application of AI I've seen thus far.

OSS is not and never will be 'sustainable'. It's always funded and there is always a narrative. And if you are genuinely doing it, use one of the GPL licences.

SAST tools can be so noisy and dumb.

Fiefox nightly actully has a usable profile switcher omg.

Say hello to Duende BFF Security Framework V3 Release Candidate 1 👋 BFF (Backend-For-Frontend) solves security and development challenges for client-side developers using SPA frameworks like #React, #Angular, VueJs or #Blazor. duende.link/bff3rc1 #dotnet #identity #oauth

Kveðja from the OAuth Security Workshop 10 in Reykjavik. Duende is proud to sponsor. #osw10

A great #devtip for being respectful and mindful about your colleagues time is to first create WIP/Draft PR and ensure CI succeds before you say it's ready/published for review. Just takes a few extra seconds to you, saves minutes and unnecessary context switching for peers.

@mikecodes.net Yo, thx for the support on the r/dotnet posts. The level of entitlement remains to be astonishing!

AMD Strix Halo appears savage. HP 14 Ultra G1A- might have finally found a replacement for my 6 year old xps 15. Eager to see the reviews.