Duende Developer Blog
Expert advice for developers and technical leaders building secure .NET applications.
- Khalid Abuhakmeh
-
-
-
- Maarten Balliauw
-
- Khalid Abuhakmeh
-
- Joe DeCock
-
-
-
-
-
-
-
- Damian Hickey
-
-
-
-
-
- Maarten Balliauw
-
-
-
- Maarten Balliauw
-
- Khalid Abuhakmeh
-
- What is Identity? - The Question Every Team Should Answer Before Writing Code Khalid Abuhakmeh
- Security Is a Spectrum: How to Choose Session Lifetimes in Duende IdentityServer Khalid Abuhakmeh, Maarten Balliauw
- Passkeys and WebAuthn with Duende IdentityServer and User Management Maarten Balliauw
- Authenticating Players in Godot 4 with OAuth 2.0 and OpenID Connect Khalid Abuhakmeh
- Hardening OAuth in the newest 2026-07-28 MCP Release Candidate Joe DeCock
- Unify Your SAML and OIDC Signing Keys with Automatic Rotation and Duende IdentityServer Khalid Abuhakmeh, Brett Hazen
- You Just Inherited a Duende IdentityServer. Now What? Khalid Abuhakmeh, Wesley Cabus
- Stop Accepting Breached Passwords: Integrating HaveIBeenPwned with Duende UserManagement AL Rodriguez, Khalid Abuhakmeh
- .NET July 2026 Security Updates: What They Mean for Your Duende Deployments Damian Hickey
- You're Already Using .NET's ChangeToken (You Just Don't Know It) Khalid Abuhakmeh, AL Rodriguez
- xUnit.net - Open Source Sponsorship Khalid Abuhakmeh, Maarten Balliauw
- Port-Agnostic Localhost Redirect URIs for MCP Authentication with Duende IdentityServer Maarten Balliauw
- Duende IdentityServer Production Deployment Checklist Khalid Abuhakmeh, Wesley Cabus
- What Duende Support Covers (And When You Need a Consultant) Maarten Balliauw
- Stop AI Bots from Wasting Your Server's Time (and Your Money) Khalid Abuhakmeh