Securing Minimal APIs with Scope-Based Authorization in .NET 10
Khalid Abuhakmeh
Duende Developer Blog
Expert advice for developers and technical leaders building secure .NET applications.
-
-
- AL Rodriguez
-
- Joe DeCock
-
-
-
-
-
- Wesley Cabus
-
- Khalid Abuhakmeh
-
- Khalid Abuhakmeh
-
- Maarten Balliauw
-
- Maarten Balliauw
-
- Joe DeCock
-
- Khalid Abuhakmeh
-
-
-
- Maarten Balliauw
-
- Khalid Abuhakmeh
-
- Security Advisory - Duende IdentityServer Pushed Authorization Requests (GHSA-mxv6-xwqj-ww2p) Damian Hickey, Joe DeCock
- .NET 11 for Duende IdentityServer Developers AL Rodriguez
- The Backend for Frontend Pattern Is Now Official IETF Guidance: RFC 10017 Published Joe DeCock
- WhatsApp One-Time Password (OTP) Login with Duende IdentityServer and User Management Maarten Balliauw, Matthijs Hoekstra
- Migrating from IdentityServer3 to Duende IdentityServer Khalid Abuhakmeh, Wesley Cabus
- Client Secrets, Mutual TLS and Private Key JWT, Oh My! Wesley Cabus
- How To Spell "Duende" Khalid Abuhakmeh
- Understanding .NET 11 Automatic CSRF Protection: A Guide for Identity Developers Khalid Abuhakmeh
- Security Lingo Explained: TOTP (Time-based One-Time Password) Maarten Balliauw
- Custom Passkey Attestation Policies: Restricting Login to Hardware Keys Maarten Balliauw
- OAuth Identity Chaining, Transaction Tokens & HITL: Summer 2026 Recap Joe DeCock
- What Is Identity in Software? Khalid Abuhakmeh
- Security Is a Spectrum: How to Choose Session Lifetimes in Duende IdentityServer Khalid Abuhakmeh, Maarten Balliauw
- Passkeys and WebAuthn with Duende IdentityServer and User Management Maarten Balliauw
- Authenticating Players in Godot 4 with OAuth 2.0 and OpenID Connect Khalid Abuhakmeh