Erwin @vandervalk.pro · 22/07/2025I wanted an inspirational picture that describes 'the next steps' for a product presentation. What I got was an image of a one legged person committing suicide. 020
Erwin @vandervalk.pro · 03/06/2025"LLM's are great for interrogating large pieces of text" Only if you don't care if the result is actually correct. Like with specs. 020
Reposted by ErwinDuende Software @duendesoftware.com · 19/05/2025Livestream coming up! 📺 Token Management: Applying the Duende Backend for Frontend (BFF) Security Framework 🗓️ June 4, 2025 ⏱️ 10 EST / 16:00 CEST / 14:00 UTC 🗣️ Speaker: Erwin van der Valk Register here: duende.link/wj42025 #dotnet #security #bffduende.linkToken ManagementWe help companies using .NET to build identity and access control solutions for modern applications. 034
Reposted by ErwinRichard Campbell @richcampbell.bsky.social · 15/05/2025OAuth 2.0 is powerful, but simple when it comes to dealing with multiple clients. @vandervalk.pro talks on .NET Rocks at www.dotnetrocks.com/details/1950 about using the Backend for Frontend (BFF) Security Framework to simplify your OAuth 2.0 implementation!dotnetrocks.com.NET Rocks!.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness. 062
Reposted by ErwinDuende Software @duendesoftware.com · 15/05/2025This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications. Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcoreduende.link.NET Rocks!.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness. 025
Erwin @vandervalk.pro · 15/05/2025Absolutely honored to have been on the Dotnet Rocks show with @richcampbell.bsky.social and @carlfranklin.bsky.social to talk about the BFF security pattern. Check it out at: www.dotnetrocks.com/details/1950bsky.app 163
Reposted by ErwinDuende Software @duendesoftware.com · 02/05/2025Data Protection in #aspnetcore is an essential part of securing applications while maintaining the capabilities to scale out to meet user demand. But how does it work? Learn more on our blog: duende.link/ywet6ag #dotnet #aspnetcore #identityduende.linkData Protection for ASP.NET Core Developers and Duende IdentityServerWe help companies using .NET to build identity and access control solutions for modern applications. 044
Reposted by ErwinDuende Software @duendesoftware.com · 30/04/2025Managing OpenAPI Specifications with Backend For Frontend and Swagger UI 📚 We'll briefly recap the BFF pattern, and then dive into a sample & learn how to reveal your OpenAPI specifications securely. duende.link/73hbw12 #dotnet #security #bff #openapi #aspnetcore 036
Erwin @vandervalk.pro · 16/04/2025I love how spotify announced a price increase and then has a big outtage. It’s what my motivation to move to something else needed. 110
Reposted by ErwinDuende Software @duendesoftware.com · 10/04/2025Fresh Duende.AccessTokenManagement release candidate! 🔑 Named keys for IDistributedCache injection 💸 HybridCache (preview) 📊 Open Telemetry metrics, logs and traces 🏕️ Externalized cache key generation 🎉 and more! github.com/DuendeSoftwa... #dotnet #oidc #securitygithub.comRelease Duende.AccessTokenManagment 4.0.0 - RC1 · DuendeSoftware/fossThis release contains several important improvements and changes: Named key support for injecting a specific IDistributedCache instance. A preview feature that allows the use of HybridCache. This ... 054
Reposted by ErwinDuende Software @duendesoftware.com · 09/04/2025Secure your #VueJS apps with OpenID Connect & the BFF pattern! 🔒 We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together. duende.link/eshdrq4 #Security #OAuth2 #OpenIDConnect #dotnet 036
Reposted by ErwinDuende Software @duendesoftware.com · 31/03/2025How are you extending Duende.AccessTokenManagement? 🧐 We are looking at minimizing the public surface area of the library, and introducing targeted extensibility points. Weigh in and help shape what this will look like in v4 👉 github.com/orgs/DuendeS... #dotnet #security #oidcgithub.comHow are you extending Duende.AccessTokenManagement? · DuendeSoftware · Discussion #140As we work on adding new features to AccessTokenManagement, we've encountered some challenges with its current design, particularly regarding extensibility. The existing approach leans towards inhe... 054
Reposted by ErwinJoe DeCock @jmdc.dev · 18/03/2025Congrats to @vandervalk.pro and the whole team! I'm really excited to finally have our Blazor BFF Bits out there in the wild! 022
Reposted by ErwinDuende Software @duendesoftware.com · 18/03/2025Today brings you #IdentityServer 7.2! 🎁 1️⃣ Strict Audience Validation ensures that the audience is equal to the issuer and validates the token’s typ value. 2️⃣ Discovery Document Caching helps throughput in large deployments And more! 👉 duende.link/hjdsk82 #dotnet #aspnetcore 079
Reposted by ErwinDuende Software @duendesoftware.com · 17/03/2025Good news! We just released Duende Backend-for-Frontend (BFF) Security Framework V3. All the necessary components to secure browser-based frontends (e.g. SPAs or #Blazor applications) with #aspnetcore backends. duende.link/iuq3t4n #dotnet 146
Reposted by ErwinDuende Software @duendesoftware.com · 19/02/2025Using Duende.AccessTokenManagement? Upgrade to v3.2.0! Previous versions contain a race condition when requesting access tokens which may trigger errors in specific cases. Advisory: github.com/DuendeSoftwa... Discussion: github.com/orgs/DuendeS... #IdentityServer #Security #dotnetgithub.comDuende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens### Summary Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing pr... 034
Reposted by ErwinMaarten Balliauw @maartenballiauw.be · 06/02/2025Let's try this GitHub discussions thing... Who's still on IdentityServer 4, and why? #dotnet github.com/orgs/DuendeS...github.comWho's still on IdentityServer 4, and why? · DuendeSoftware · Discussion #36When looking at NuGet, I noticed IdentityServer 4 still has many downloads. Which makes me curious: who's still on IdentityServer 4, and why? Is it because your solution is locked on an older .NET ... 2412
Reposted by ErwinMaarten Balliauw @maartenballiauw.be · 03/02/2025If you're still on IdentityServer4, what's the reason? 203
Erwin @vandervalk.pro · 21/01/2025Hmm… currently watching civil war. Not a feel good vibe. Especially not now. 000
Reposted by ErwinDuende Software @duendesoftware.com · 15/01/2025Duende IdentityServer v7.1.0 general availability release is now live. This release includes .NET 9 support, enhancements, bug fixes, performance improvements, and more. See the release notes: github.com/DuendeSoftwa... #dotnet 11312
Erwin @vandervalk.pro · 03/01/2025I'm absolutely delighted to announce that i've joined @duendesoftware.com as a Principal Engineer. I truly enjoyed my time at YuzeData, where I got to work (again) with some of my amazing friends and I'm very proud of how much we have achieved. It's absolutely been a blast! 152
Erwin @vandervalk.pro · 18/12/2024Has anybody else experienced slowdowns with .net 9 compilation vs .net 8? I'm noticing it especially in ncrunch. 000
Reposted by ErwinJohn Cutler @johncutle.fish · 20/11/2024Some images from the Twitter years in a thread (since they are no longer accessible) 1/n 426262
Erwin @vandervalk.pro · 31/10/2024It's 'fun' to see (likely malicious) scanners at work when looking at access logs. For the system I'm working on, I periodically check the access logs. You can clearly see that our system is constantly being scanned by tools looking for vulnerabilities. Any system connected to the internet is. 100
Erwin @vandervalk.pro · 25/10/2024When you're listening back to a badly AI transcribed meeting and you see this... your brain translates the badly transcribed text into something you actually hear. awkward 020