Duende Software
duendesoftware.com
Duende Software
@duendesoftware.com
Duende Software. Makers of Duende IdentityServer and the BFF security framework. https://duendesoftware.com https://youtube.com/@duendesoftware
The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere.

What about subdomains? Or multiple domains? In this post, we'll explore some options.

duende.link/igeq87f #dotnet #security #passkeys #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
November 12, 2025 at 2:45 PM
In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web applications for years.

Learn what CSRF is, how it works, and how to defend against it in #aspnetcore

youtu.be/WUJrKw05YfI

#dotnet
Prevent Cross-Site Request Forgery
Welcome to the Duende Software web security video series! In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web…
youtu.be
November 12, 2025 at 7:30 AM
Congratulations Microsoft with the #dotnet 10 release! devblogs.microsoft.com/dotnet/annou...

Who's upgrading, when? (We're on it for our SDKs)
Announcing .NET 10 - .NET Blog
Announcing the release of .NET 10, the most productive, modern, secure, intelligent, and performant release of .NET yet. With updates across ASP.NET Core, C# 14, .NET MAUI, Aspire, and so much more.
devblogs.microsoft.com
November 11, 2025 at 5:48 PM
📢 .NET 10 is here, but what about security? 🤔

In this post, we explore missing security features in #dotnet 10 and discover how Duende Software fills the gaps for Token Management, DPoP, Blazor, and OAuth 2.0 Introspection!

duende.link/q13yifc
November 11, 2025 at 1:15 PM
Adding .NET 10 Passkey Support to Duende IdentityServer

👉 duende.link/berqe86

Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages.

#security #aspnetcore #identity #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
November 10, 2025 at 7:30 AM
What are Best Practices of Web Application Security in 2025?

This post focuses on key security and authentication flows using OAuth 2.0 and OpenID Connect, flows to avoid, security measures to implement, and IETF Best Current Practices.

duende.link/iyqe3fk #security #dotnet
Web App Security Best Practices 2025
Discover best practices for web application security in 2025. Learn about OAuth 2.0 flows, PKCE, the Backend for Frontend pattern, and more.
duende.link
November 7, 2025 at 7:01 AM
Brace yourself, w̶i̶n̶t̶e̶r̶ #dotnet 10 is coming! ⛄️

Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more.

duende.link/qet4wp9 #aspnetcore
November 6, 2025 at 6:31 PM
In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web applications for years.

Learn what CSRF is, how it works, and how to defend against it in #aspnetcore

youtu.be/WUJrKw05YfI

#dotnet
November 6, 2025 at 2:35 PM
Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐

In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more!

youtu.be/7_OzM1c-STk #dotnet
Mobile and Desktop Applications
Secure your native applications, like mobile and desktop applications using IdentityServer 0:00 Introduction 0:38 Anti pattern: In-app login page 1:19 Why not resource owner password flow? 2:03 Role…
youtu.be
November 5, 2025 at 9:30 AM
Heads up, #dotnet developers! 🚀

.NET 10 is a great time to upgrade your application and its dependencies.

In this post, we look at key .NET 10 breaking changes you need to know about for a smooth upgrade.

👉 duende.link/89qegla

#aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
November 4, 2025 at 1:23 PM
Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript.

We'll see why you want to use a BFF & how this pattern makes secure API access less cumbersome youtu.be/pSTMCyQH_E4

#dotnet #identity #aspnetcore
Integrating SPAs with BFF
Protect SPAs with OpenID Connect created with libraries like Angular and React or even just plain javascript. 0:00 Introduction 00:28 Authentication: server-rendered vs. client-rendered 01:18 Why…
youtu.be
November 3, 2025 at 12:14 PM
Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials.

Part 1 of our 4-part blog series covers password and authentication evolution 👀

duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 31, 2025 at 5:07 PM
Great livestream a couple of weeks ago with .NET MVP Tore Nestenius:
Demystifying Authentication in #aspnetcore Core

A hands-on, clearly explained deep dive into the world of authentication. Recommended watch!

www.youtube.com/watch?v=8tZQ...

#dotnet #security #identity
Demystifying Authentication in ASP.NET Core
Overview: Authentication in ASP.NET Core is a complex beast with many concepts and moving parts. In this session, we’ll clarify how authentication in ASP.NET Core works and explain key concepts:…
www.youtube.com
October 30, 2025 at 4:45 PM
The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere.

What about subdomains? Or multiple domains? In this post, we'll explore some options.

duende.link/igeq87f #dotnet #security #passkeys #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 29, 2025 at 8:30 AM
Claims and scopes describe user information in OpenID Connect.

Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for.

duende.link/97aeqlj 👀

#dotnet #aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 28, 2025 at 12:31 PM
Passwordless authentication is gaining momentum. The upcoming release of #dotnet 10 comes with built-in passkey support!

In this post, we look at the new #Blazor project template and how it adds secure authentication using passkeys.

duende.link/37egw9f

#identity #passkey #webauthn #aspnetcore
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 27, 2025 at 8:02 AM
Adding .NET 10 Passkey Support to Duende IdentityServer

👉 duende.link/berqe86

Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages.

#security #aspnetcore #identity #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 24, 2025 at 3:31 PM
The server's origin is used to generate passkey credentials. A credential signed for one app can't be used elsewhere.

What about subdomains? Or multiple domains? In this post, we'll explore some options.

duende.link/igeq87f #dotnet #security #passkeys #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 23, 2025 at 2:15 PM
We're happy to start sponsoring the Spectre.Console project!

It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience.

Go check it out! duende.link/sp3ctr3
October 22, 2025 at 1:45 PM
Adding .NET 10 Passkey Support to Duende IdentityServer

👉 duende.link/berqe86

Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages.

#security #aspnetcore #identity #webauthn
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 21, 2025 at 8:49 AM
Secure your native applications, like mobile and desktop applications, using #IdentityServer 🔐

In this video, we cover why in-app login pages are outdated, the role of the browser, the Duende OidcClient library, secure token storage, and more!

youtu.be/7_OzM1c-STk #dotnet
Mobile and Desktop Applications
Secure your native applications, like mobile and desktop applications using IdentityServer 0:00 Introduction 0:38 Anti pattern: In-app login page 1:19 Why not resource owner password flow? 2:03 Role…
youtu.be
October 20, 2025 at 1:31 PM
Discover a key update in #dotnet 10 that improves local development! 🔥

In this blog post, we explain how a new TLS certificate and unique local domains can solve cookie conflicts and better mimic production environments.

duende.link/arbgu89

#aspnetcore #security
Duende Software - Identity and Access Management for .NET
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
October 16, 2025 at 3:45 PM
The Duende livestream is starting now!

Custom Authentication in #aspdotnet Core with Elin & Robert from Active Solution

🕐 Starting now (10:00 EST / 16:00 CEST)

Join us on YouTube ➡️ www.youtube.com/watch?v=o0MC...

#dotnet #security #identity
Building Custom Authentication in ASP.NET Core
Want to go beyond the built-in authentication handlers in ASP.NET? In this session, Robert Folkesson and Elin Fokine from Active Solution will break down what a RemoteAuthenticationHandler actually…
www.youtube.com
October 16, 2025 at 1:57 PM
The Duende livestream starts in one hour!

Custom Authentication in #aspdotnet Core with Elin & Robert from Active Solution

🕐 In one hour! (10:00 EST / 16:00 CEST)

Join us on YouTube ➡️ www.youtube.com/watch?v=o0MC...

#dotnet #security #identity
October 16, 2025 at 1:00 PM
Less than 1 day until our livestream. Don't miss:

Custom Authentication in #aspdotnet Core

Go beyond the built-in authentication handlers in ASP.NET and learn about a RemoteAuthenticationHandler.

Register now 👉 t.co/jgxpGooTE7

#dotnet #security #identity
October 15, 2025 at 5:57 PM