Duende Developer Blog
Expert advice for developers and technical leaders building secure .NET applications.
- Maarten Balliauw
-
- AL Rodriguez
-
- Joe DeCock
-
- Maarten Balliauw
-
- Maarten Balliauw
-
- AL Rodriguez
-
- Joe DeCock
-
- Maarten Balliauw
-
- Joe DeCock
-
- Khalid Abuhakmeh
-
- Khalid Abuhakmeh
-
-
-
- AL Rodriguez
-
- Joe DeCock
-
-
-
- OAuth Token Exchange in Practice: Building a Snake Game Maarten Balliauw
- Home Assistant Single Sign-On with Duende IdentityServer AL Rodriguez
- Proof of “Possession”: A DPoP Séance 🎃 Joe DeCock
- Better Navigation and Version Selection in Duende Docs Maarten Balliauw
- Security Lingo Explained: WebAuthn (Passkeys and Passwordless Authentication) Maarten Balliauw
- Are C# and .NET Worth Learning in 2026? AL Rodriguez
- CIMD vs DCR: A Better Client Registration Model for MCP Authorization Joe DeCock
- Bridge Azure Workload Identity to Client Identity with Dynamic Client Registration Maarten Balliauw
- Your Agentic Identity Problem Probably Isn't New Joe DeCock
- MarkdownSnippets - Open Source Sponsorship Khalid Abuhakmeh
- Securing Minimal APIs with Scope-Based Authorization in .NET 10 Khalid Abuhakmeh
- Security Advisory - Duende IdentityServer Pushed Authorization Requests (GHSA-mxv6-xwqj-ww2p) Damian Hickey, Joe DeCock
- .NET 11 for Duende IdentityServer Developers AL Rodriguez
- The Backend for Frontend Pattern Is Now Official IETF Guidance: RFC 10017 Published Joe DeCock
- WhatsApp One-Time Password (OTP) Login with Duende IdentityServer and User Management Maarten Balliauw, Matthijs Hoekstra