Pretty much exactly one year after the release of IdentityServer v6, we are happy to announce our next major version: IdentityServer v7.
Besides the usual cleanup, bug fixing and stability improvements, we have focused on the following major areas.
Compatibility with .NET 8
Microsoft switched to new JWT and JSON plumbing in ASP.NET Core 8. This has caused a lot of subtle compatibility problems for everyone. This is also the main reason older versions of IdentityServer are not compatible anymore with .NET 8.
Addition of Pushed Authorization Requests support
PAR is a more secure way to initiate OpenID Connect and OAuth flows. See our blog post and video.
More OpenTelemetry support
In addition to Otel traces, we also added meters/metrics throughout the code base.
Updated default refresh token behavior
The IETF guidance around various application types has changed over the years. Especially for browser-based applications and refresh token rotation. This update brings us more inline with those recommendations and removes some unneeded complexity. Upcoming blog post - stay tuned.
You can find more details about the improvements, changes and breaking changes in our release notes and the upgrade guides here.
We will now start focussing on our IdentityModel/Access Token Management and BFF libraries for the coming months and after that reveal some of the planned features for the next IdentityServer release.
Thanks for stopping by!
We hope this post helped you on your identity and security journey. If you need a hand with implementation, our docs are always open. For everything else, come hang out with the team and other developers on GitHub.
If you want to get early access to new features and products while collaborating with experts in security and identity standards, join us in our Duende Product Insiders program. And if you prefer your tech content in video form, our YouTube channel is the place to be. Don't forget to like and subscribe!
Questions? Comments? Just want to say hi? Leave a comment below and let's start a conversation.