Erwin
vandervalk.pro
Erwin
@vandervalk.pro
Software Architect | c# | dotNet | cloud |
Parent | Swordsman | Metal Head | History and Science Enthusiast|
Principal Engineer @ Duende Software
I wanted an inspirational picture that describes 'the next steps' for a product presentation. What I got was an image of a one legged person committing suicide.
July 22, 2025 at 7:57 AM
"LLM's are great for interrogating large pieces of text"

Only if you don't care if the result is actually correct. Like with specs.
June 3, 2025 at 9:42 AM
Reposted by Erwin
Livestream coming up! 📺

Token Management: Applying the Duende Backend for Frontend (BFF) Security Framework

🗓️ June 4, 2025
⏱️ 10 EST / 16:00 CEST / 14:00 UTC
🗣️ Speaker: Erwin van der Valk

Register here: duende.link/wj42025 #dotnet #security #bff
Token Management
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
May 19, 2025 at 11:02 AM
Reposted by Erwin
OAuth 2.0 is powerful, but simple when it comes to dealing with multiple clients.

@vandervalk.pro talks on .NET Rocks at www.dotnetrocks.com/details/1950 about using the Backend for Frontend (BFF) Security Framework to simplify your OAuth 2.0 implementation!
.NET Rocks!
.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.
www.dotnetrocks.com
May 15, 2025 at 3:03 PM
Reposted by Erwin
This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications.

Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcore
.NET Rocks!
.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.
duende.link
May 15, 2025 at 12:30 PM
Absolutely honored to have been on the Dotnet Rocks show with @richcampbell.bsky.social and @carlfranklin.bsky.social to talk about the BFF security pattern.

Check it out at: www.dotnetrocks.com/details/1950
bsky.app
May 15, 2025 at 7:15 AM
Reposted by Erwin
Data Protection in #aspnetcore is an essential part of securing applications while maintaining the capabilities to scale out to meet user demand. But how does it work?

Learn more on our blog: duende.link/ywet6ag #dotnet #aspnetcore #identity
Data Protection for ASP.NET Core Developers and Duende IdentityServer
We help companies using .NET to build identity and access control solutions for modern applications.
duende.link
May 2, 2025 at 12:30 PM
Reposted by Erwin
Managing OpenAPI Specifications with Backend For Frontend and Swagger UI 📚

We'll briefly recap the BFF pattern, and then dive into a sample & learn how to reveal your OpenAPI specifications securely.

duende.link/73hbw12 #dotnet #security #bff #openapi #aspnetcore
April 30, 2025 at 1:30 PM
I love how spotify announced a price increase and then has a big outtage. It’s what my motivation to move to something else needed.
April 16, 2025 at 3:40 PM
Reposted by Erwin
Fresh Duende.AccessTokenManagement release candidate!

🔑 Named keys for IDistributedCache injection
💸 HybridCache (preview)
📊 Open Telemetry metrics, logs and traces
🏕️ Externalized cache key generation
🎉 and more!

github.com/DuendeSoftwa...

#dotnet #oidc #security
Release Duende.AccessTokenManagment 4.0.0 - RC1 · DuendeSoftware/foss
This release contains several important improvements and changes: Named key support for injecting a specific IDistributedCache instance. A preview feature that allows the use of HybridCache. This ...
github.com
April 10, 2025 at 1:00 PM
Reposted by Erwin
Secure your #VueJS apps with OpenID Connect & the BFF pattern! 🔒

We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together.

duende.link/eshdrq4

#Security #OAuth2 #OpenIDConnect #dotnet
April 9, 2025 at 12:27 PM
Reposted by Erwin
How are you extending Duende.AccessTokenManagement? 🧐

We are looking at minimizing the public surface area of the library, and introducing targeted extensibility points.

Weigh in and help shape what this will look like in v4 👉 github.com/orgs/DuendeS... #dotnet #security #oidc
How are you extending Duende.AccessTokenManagement? · DuendeSoftware · Discussion #140
As we work on adding new features to AccessTokenManagement, we've encountered some challenges with its current design, particularly regarding extensibility. The existing approach leans towards inhe...
github.com
March 31, 2025 at 10:01 AM
Reposted by Erwin
Congrats to @vandervalk.pro and the whole team! I'm really excited to finally have our Blazor BFF Bits out there in the wild!
March 18, 2025 at 11:42 PM
Reposted by Erwin
Today brings you #IdentityServer 7.2! 🎁

1️⃣ Strict Audience Validation ensures that the audience is equal to the issuer and validates the token’s typ value.
2️⃣ Discovery Document Caching helps throughput in large deployments

And more! 👉 duende.link/hjdsk82 #dotnet #aspnetcore
March 18, 2025 at 4:12 PM
Reposted by Erwin
Good news! We just released Duende Backend-for-Frontend (BFF) Security Framework V3.

All the necessary components to secure browser-based frontends (e.g. SPAs or #Blazor applications) with #aspnetcore backends.

duende.link/iuq3t4n #dotnet
March 17, 2025 at 2:03 PM
Reposted by Erwin
Using Duende.AccessTokenManagement? Upgrade to v3.2.0!

Previous versions contain a race condition when requesting access tokens which may trigger errors in specific cases.

Advisory: github.com/DuendeSoftwa...
Discussion: github.com/orgs/DuendeS...

#IdentityServer #Security #dotnet
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
### Summary Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing pr...
github.com
February 19, 2025 at 8:17 AM
Reposted by Erwin
Let's try this GitHub discussions thing... Who's still on IdentityServer 4, and why? #dotnet

github.com/orgs/DuendeS...
Who's still on IdentityServer 4, and why? · DuendeSoftware · Discussion #36
When looking at NuGet, I noticed IdentityServer 4 still has many downloads. Which makes me curious: who's still on IdentityServer 4, and why? Is it because your solution is locked on an older .NET ...
github.com
February 6, 2025 at 11:05 AM
Reposted by Erwin
If you're still on IdentityServer4, what's the reason?
February 3, 2025 at 5:21 PM
Hmm… currently watching civil war. Not a feel good vibe. Especially not now.
January 21, 2025 at 5:43 PM
Reposted by Erwin
Duende IdentityServer v7.1.0 general availability release is now live. This release includes .NET 9 support, enhancements, bug fixes, performance improvements, and more.

See the release notes: github.com/DuendeSoftwa... #dotnet
January 15, 2025 at 12:41 PM
Forged my own axe the other day, together with my son.
January 8, 2025 at 5:09 PM
I'm absolutely delighted to announce that i've joined @duendesoftware.com as a Principal Engineer.

I truly enjoyed my time at YuzeData, where I got to work (again) with some of my amazing friends and I'm very proud of how much we have achieved. It's absolutely been a blast!
January 3, 2025 at 9:44 AM
Has anybody else experienced slowdowns with .net 9 compilation vs .net 8? I'm noticing it especially in ncrunch.
December 18, 2024 at 1:45 PM
Reposted by Erwin
Some images from the Twitter years in a thread (since they are no longer accessible) 1/n
November 20, 2024 at 2:34 AM
Time to polish the swords again…
November 4, 2024 at 2:29 PM