iiinova — where your digital self keeps evolving

Osman Elsayed

@osmanmelsayed.com

Software Engineer passionate about identity and access management. In a mission of making IAM better @ Visma e-conomic. Sudanese 🇸🇩 that found his home in the vibrant tech hub of Copenhagen 🇩🇰.

Posts Replies Media

Reposted by Osman Elsayed

Dominick Baier @leastprivilege.com · 31/01/2025

Finally! Grats! datatracker.ietf.org/doc/rfc9700/

datatracker.ietf.org

RFC 9700: Best Current Practice for OAuth 2.0 Security

This document describes best current security practice for OAuth 2.0. It updates and extends the threat model and security advice given in RFCs 6749, 6750, and 6819 to incorporate practical experience...

03420

Osman Elsayed @osmanmelsayed.com · 12/12/2024

It would also be nice to visualize what does my license allow me to do. That can be in a self-service portal, or something like that.

000

Osman Elsayed @osmanmelsayed.com · 12/12/2024

I'd just say: - Consider adding an OOTB license heath check. It'd be a nice compliment to the graceful behavior of the license validation. So, if the lincese isn't available in prod, then it's easier to notice for devs. Also consider bundling it with (docs.duendesoftware.com/identityserv...).

docs.duendesoftware.com

Duende Software Documentation

The most flexible and standards-compliant OpenID Connect and OAuth 2.0 framework for ASP.NET Core.

100

Osman Elsayed @osmanmelsayed.com · 12/12/2024

Thanks for reaching out @jmdc.dev! I'm happy with the current license validation logic. It strikes a good balance between being graceful enough (prod won't stop working if the license expires) and being restrictive enough (advanced features won't work without a valid license in prod).

110

Osman Elsayed @osmanmelsayed.com · 28/11/2024

If you are running Duende Identity Server in prod, and you want to ensure you have a valid license and also potentially get notified early before the license expires, the checkout bit.ly/4g7CP10

bit.ly

Tracking Duende Identity Server's license validity

How to implement check the validity of Duende Identity Server license and monitor the expiration date of the license in production.

133