iiinova — where your digital self keeps evolving

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 28/08/2026

🔐 Let’s talk authentication! Join us September 29 in Essen for our next #VISUG meetup with Wesley Cabus and Maarten Balliauw. Two talks on ASP.NET Core Authentication and Passkeys, plus food & drinks. And yes, it’s free! 🍕🥤 #VISUG #ASPNETCore #DotNet #Community

visug.be

ASP.NET Core Authentication Explained + Going Passwordless: A Practical Guide to Passkeys in ASP.NET Core — VISUG

Tuesday, 29 September 2026 • 18:00 • ODS Belgium B.V., Peepolderlaan 23, 2910 Essen

113

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 22/04/2026

We've published guidance on the high-severity #aspnetcore Data Protection vulnerability, CVE-2026-40372 (Elevation of Privilege) Read our guide to: * Determine if your applications are affected * Get mitigation steps 👉️ duende.link/twe5wp #dotnet

duende.link

Update Guidance for CVE-2026-40372 - ASP.NET Data Protection

Guidance on the high-severity CVE-2026-40372 vulnerability in Microsoft.AspNetCore.DataProtection. Learn how attackers can use it, check if your application is affected, and find the critical steps…

024

Reposted by Wesley Cabus

Barry Dorrans @blowdart.me · 21/04/2026

.NET has an out of band update today to fix CVE-2026-40372, an Elevation of Privilege, which, in some cases, could allow an attacker to forge authentication tickets, or decode authentication tickets or other protected data. github.com/dotnet/annou...

github.com

Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege · Issue #395 · dotnet/announcements

Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege Executive Summary: A bug in Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages can give an attacker th...

22417

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 05/02/2026

Security you can’t prove isn’t security, it’s hope. Stop relying on manual checks. We’re showing you how to automate your security testing to ensure your API only accepts your trusted tokens. 🔗 March 3rd. Be there: duende.link/lsjwt26b #OAuth2 #JWT #DotNet

duende.link

Livestream: Are your access tokens really secure?

Are your APIs vulnerable? Explore JWT pitfalls, learn to prevent exploits, and compare JWTs vs. opaque tokens in this expert-led session.

012

Wesley Cabus @gotsharp.be · 05/02/2026

Ever wondered what would happen if you mistake a USB-A port for a USB-C one, and try to insert the USB-C plug? 50/50 chance that you short-circuit your device, with another 50/50 chance that said device no longer wants to function afterwards. YMMV. I got lucky 😅

120

Reposted by Wesley Cabus

Tech Talks Weekly @techtalksweekly.bsky.social · 23/01/2026

*Are you sure your access tokens are really secure?* by @gotsharp.be is a really great talk that exposes common validation mistakes that let attackers use forged tokens and explains how to prevent them. @ndcconferences.com youtube.com/watch?v=Jc1D...

youtube.com

Are you sure your access tokens are really secure? - Wesley Cabus - NDC Copenhagen 2025

YouTube video by NDC Conferences

043

Reposted by Wesley Cabus

Anders Abel @anders.abel.nu · 16/01/2026

I took some time over the holidays to hack on an idea of a documentation for .NET solutions. There are so many things that can be done, but the first step is to make what already exists available: NuDoc.NET creates cross-linked reference docs for any package on Nuget.org nudoc.net/Docs/Sustain...

nudoc.net

Sustainsys.Saml2 - NuDoc.NET

043

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 11/12/2025

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

001

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 05/12/2025

Shape the future of Duende products! Early Access!! Deep Collaboration!!! Better Security and Identity!!!! Apply Now for Duende Product Insiders! duende.link/discord #dotnet #security #identity

011

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 03/12/2025

We built our own JWT Decoder tool - jwt.me! 🧐 Quickly inspect and validate your JSON Web Tokens. It features automatic public key (JWK) retrieval, inline claim explanations, and presenter mode. Read all about it: duende.link/387skhq #dotnet

jwt.me

Duende IdentityServer

Using this tool, you can decode and validate JSON Web Tokens (JWTs) issued by IdentityServer or another token issuer.

042

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 02/12/2025

LAST CALL! 🚨 Launch livestream starts soon (Dec 2nd)! Learn how Duende IdentityServer v7.4 secures enterprises implementing MCP with RFC 8414, and how to adopt .NET 10 LTS to deliver critical security features. Register here ➡️ duendesoftware.com/webinars/due... #dotnet #security #mcp

011

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 25/11/2025

It’s VisugXL week! That’s all. That’s the post. 😎 Make sure to grab your tickets now (only a few seats left) 👉 www.visug.be/Events/102

012

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 24/11/2025

It’s VisugXL week! 🎉 Thanks to our amazing partners, we we can keep this event completely FREE! And guess what? There are still some seats left! Grab yours now! 👉 www.visug.be/Events/102

043

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 20/11/2025

December 2nd is #VISUG time! 🎉 Join us at ChipSoft in Antwerp as we’re diving into distributed coordination (aka “chaos but make it elegant”) and Infrastructure as Code (aka “stop clicking around in portals like it’s 2009”). Grab your FREE ticket 👉 www.visug.be/Events/105

visug.be

Visug The Visual Studio User Group

021

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 12/11/2025

In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web applications for years. Learn what CSRF is, how it works, and how to defend against it in #aspnetcore youtu.be/WUJrKw05YfI #dotnet

youtu.be

Prevent Cross-Site Request Forgery

Welcome to the Duende Software web security video series! In this video, Christian Wenz dives deep into Cross-Site Request Forgery (CSRF), a simple yet devastating attack that has plagued web…

012

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 10/11/2025

🎤 Meet one of our VISUG XL 2025 speakers: 𝐒𝐡𝐚𝐮𝐧 𝐋𝐚𝐰𝐫𝐞𝐧𝐜𝐞! We’re excited to welcome 𝐒𝐡𝐚𝐮𝐧 this year at Visug XL, our yearly, free, community-driven .NET conference. 📅 November 28, 2025 📍 UCLL Leuven 👉 More information and tickets: www.visug.be/Events/102 #VisugXL #DotNet #Community #Conference

012

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 28/10/2025

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

027

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 27/10/2025

Pssst... We at VISUG know it's "Herfstvakantie" and how challenging it can be with the kids. 🤪 So, here's a escape for all the parents out there: this Thursday at Spoor 18 in Mechelen, we've got food, drinks and sessions! (Not looking for an escape? You're welcome as well 😉) www.visug.be/Events/104

visug.be

Visug The Visual Studio User Group

November 2025 marks the release of .NET 10 and C# 14. In this session, I will talk about what is new in the latest version of .NET and what the future will bring for the .NET platform in general.…

012

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 21/10/2025

Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

015

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 15/10/2025

Our next livestream with Active Solution is coming up soon! Custom Authentication in #aspdotnet Core Go beyond the built-in authentication handlers in ASP.NET and learn about a RemoteAuthenticationHandler. Register 👉 t.co/jgxpGooTE7 #dotnet #security #identity

011

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 15/10/2025

🎤 Meet one of our VISUG XL 2025 speakers: 𝐀𝐧𝐣𝐮𝐥𝐢 𝐉𝐡𝐚𝐤𝐫𝐲! We’re excited to welcome 𝐀𝐧𝐣𝐮𝐥𝐢 this year at Visug XL, our yearly, free, community-driven .NET conference. 📅 November 28, 2025 📍 UCLL Leuven 👉 More information and tickets: www.visug.be/Events/102 #VisugXL #DotNet #Community #Conference

012

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 14/10/2025

The server's origin is used to generate passkey credentials, making them resistant to phishing. A credential signed for one app can't be used elsewhere. What about subdomains? Or multiple domains? In this post, we'll explore some options. duende.link/igeq87f #dotnet #security #passkeys #webauthn

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

023

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 09/10/2025

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

25218

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 30/09/2025

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution. Longread ahead! 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

064

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 29/09/2025

Discover a key update in #dotnet 10 that improves local development! 🔥 In this blog post, we explain how a new TLS certificate and unique local domains can solve cookie conflicts and better mimic production environments. duende.link/arbgu89 #aspnetcore #security

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

054

Wesley Cabus @gotsharp.be · 29/09/2025

Hey @jetbrains.com, I'm getting an "Error 403: Not Authorized" error when completing the JetBrains Developer Recognition Program form. I tried signing in first with my account, same result.

120

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 17/09/2025

Let's explore the world of OpenID Connect with a focus on claims, scopes, and how Duende IdentityServer facilitates authentication in #dotnet applications. Learn how apps request necessary claim information! 👩🏼‍🏫 duende.link/j28b2bw #security #identity #aspnetcore

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

011

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 16/09/2025

Brace yourself, w̶i̶n̶t̶e̶r̶ #dotnet 10 is coming! ⛄️ Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. 👀 duende.link/qet4wp9 #aspnetcore

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

044

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 03/09/2025

Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript. We'll see why you want to use a BFF & how this pattern makes secure API access less cumbersome youtu.be/pSTMCyQH_E4 #dotnet #identity #aspnetcore

youtu.be

Integrating SPAs with BFF

Protect SPAs with OpenID Connect created with libraries like Angular and React or even just plain javascript. 0:00 Introduction 00:28 Authentication: server-rendered vs. client-rendered 01:18 Why…

031

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 02/09/2025

HttpClient is at the heart of many projects. DelegatingHandlers let you intercept and modify requests and responses, extending base functionality. In this blog post, we'll look at DelegatingHandler and how it can make HttpClient even more powerful! 💪 duende.link/78qe4kj #dotnet #aspnetcore

duendesoftware.com

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

035

Wesley Cabus @gotsharp.be · 29/08/2025

We're hiring! At @duendesoftware.com, we're looking for someone to join our Customer Success team. It's a 100% remote position but we are looking for someone based in the US East Coast region for time zone reasons. If you're interested, visit duendesoftware.com/careers/cust... for details! #hiring

duendesoftware.com

Customer Success Engineer

Duende software looking to fill Customer Success Engineer position

006

Wesley Cabus @gotsharp.be · 16/08/2025

Holy moly! Lervig has some crazy beers in their rack house line!

A bottle of Lervig’s Original Sin Bourbon Barrel Aged beer, poured in a glass

010

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 05/08/2025

What are Best Practices of Web Application Security in 2025? This post focuses on key security and authentication flows using OAuth 2.0 and OpenID Connect, flows to avoid, security measures to implement, and IETF Best Current Practices. duende.link/iyqe3fk #security #dotnet

032

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 28/07/2025

Fresh post on external providers in #aspnetcore We cover initial setup, the connection between external and cookie authentication, and discusses why alternatives might be better for production apps. duende.link/q24tubs #security #identity #dotnet

duende.link

Duende Software - Identity and Access Management for .NET

We help companies using .NET to build identity and access control solutions for modern applications.

015

Reposted by Wesley Cabus

Damian Edwards @damianedwards.com · 14/07/2025

Coming to an ASP.NET Core HTTPS development certificate near you soon...

5417

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 03/07/2025

Check out the freshly deployed IdentityServer 7.3.0 Release Candidate 1. It brings FAPI 2.0 profile certification, JWT response from the introspection endpoint, diagnostics data, OpenTelemetry updates, and more! duende.link/is73rc1 #dotnet #security

duende.link

New release: IdentityServer 7.3.0 Release Candidate 1 · DuendeSoftware · Discussion #256

Great news today! The Duende IdentityServer 7.3.0 Release Candidate 1 has been published on NuGet! Release notes Upgrade guide IdentityServer 7.3 is a significant release that includes: FAPI 2.0 pr...

023

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 25/06/2025

How I got involved in the Backend for Frontend (BFF) spec? @philippederyck.bsky.social built a demo to show how insecure single-page applications can be! Full interview: youtu.be/urS9wstmN2U More on Backend for Frontend: duende.link/bff #dotnet #security #bff #oauth2

025

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 24/06/2025

The #dotnet 8.0.17 upgrade fixed validation of forwarded headers and proxy server configuration in load balanced scenarios. Great! Or not 🤔 This patch may affect your #aspnetcore app. 😱 Check our blog post for background and fix: duende.link/0mgnet8

014

Reposted by Wesley Cabus

Visual Studio User Group @visug.bsky.social · 18/06/2025

Got a killer dev talk? Bring it to the stage at VisugXL 2025! 🎤 We’re talking .NET, Azure, OSS, real-world code — the good stuff. 📅 Nov 28 – Leuven, Belgium Hit us with your best shot 👉 sessionize.com/visugxl-2025 #VisugXL2025 #CallForSpeakers #dotnet #Azure #DevRockstars

sessionize.com

VisugXL 2025 : Call for Speakers

VisugXL 2025 is the annual 1-day, free conference of Visug, bringing together students, developers, architects, and technology enthusiasts for a day o...

057

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 17/06/2025

Terms like "client" in OpenID Connect and OAuth 2.0 are clear for security folks, but non-technical people are sometimes confused. In this post, let's clarify what a "client" means in application security. duende.link/m8tyde4 #dotnet #security #identity

005

Wesley Cabus @gotsharp.be · 07/06/2025

Cheers to the weekend 🍻

Picture showing a bottle of Lervig “Off the rack Kentucky Bourbon 2022” beer, poured into a glass

030

Wesley Cabus @gotsharp.be · 07/06/2025

Sometimes, I see errors or bugs that are so obviously trivial to fix (or even worse, regression bugs), that make me think two things: 1. Is everyone really just using AI to code these days or did the average developer become soo lax? 2. Give me an hour and I’ll fix it for you. Sheesh.

210

Wesley Cabus @gotsharp.be · 03/06/2025

Tonight, it is time to assemble a new gaming rig 🥳 #gaming #desktop

Boxed PC parts, showing an AMD Ryzen 9800X3D, MSI GeForce RTX 5080, Asrock X870E Taichi motherboard, AIO watercooling and a power supply

130

Reposted by Wesley Cabus

Duende Software @duendesoftware.com · 03/06/2025

Did you see #dotnet run app.cs was announced at #MSBuild for .NET 10? We've been trying it out to test the #IdentityServer login flow, and it's quite nice! In this post we'll see how to test first-party logins work properly, entirely through .NET code. duende.link/qhr2shs

033