Sign in

Erwin

@vandervalk.pro
46 followers 54 following 40 posts

Software Architect | c# | dotNet | cloud | Parent | Swordsman | Metal Head | History and Science Enthusiast| Principal Engineer @ Duende Software

PostsRepliesMedia
Erwin @vandervalk.pro · 22/07/2025
I wanted an inspirational picture that describes 'the next steps' for a product presentation. What I got was an image of a one legged person committing suicide.
020
Erwin @vandervalk.pro · 03/06/2025
"LLM's are great for interrogating large pieces of text" Only if you don't care if the result is actually correct. Like with specs.
from the actual specfrom chatgtp
020
Reposted by Erwin
Duende Software @duendesoftware.com · 19/05/2025
Livestream coming up! 📺 Token Management: Applying the Duende Backend for Frontend (BFF) Security Framework 🗓️ June 4, 2025 ⏱️ 10 EST / 16:00 CEST / 14:00 UTC 🗣️ Speaker: Erwin van der Valk Register here: duende.link/wj42025 #dotnet #security #bff
duende.link
Token Management
We help companies using .NET to build identity and access control solutions for modern applications.
034
Reposted by Erwin
Richard Campbell @richcampbell.bsky.social · 15/05/2025
OAuth 2.0 is powerful, but simple when it comes to dealing with multiple clients. @vandervalk.pro talks on .NET Rocks at www.dotnetrocks.com/details/1950 about using the Backend for Frontend (BFF) Security Framework to simplify your OAuth 2.0 implementation!
dotnetrocks.com
.NET Rocks!
.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.
062
Reposted by Erwin
Duende Software @duendesoftware.com · 15/05/2025
This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications. Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcore
duende.link
.NET Rocks!
.NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.
025
Erwin @vandervalk.pro · 15/05/2025
Absolutely honored to have been on the Dotnet Rocks show with @richcampbell.bsky.social and @carlfranklin.bsky.social to talk about the BFF security pattern. Check it out at: www.dotnetrocks.com/details/1950
bsky.app
163
Reposted by Erwin
Duende Software @duendesoftware.com · 02/05/2025
Data Protection in #aspnetcore is an essential part of securing applications while maintaining the capabilities to scale out to meet user demand. But how does it work? Learn more on our blog: duende.link/ywet6ag #dotnet #aspnetcore #identity
duende.link
Data Protection for ASP.NET Core Developers and Duende IdentityServer
We help companies using .NET to build identity and access control solutions for modern applications.
044
Reposted by Erwin
Duende Software @duendesoftware.com · 30/04/2025
Managing OpenAPI Specifications with Backend For Frontend and Swagger UI 📚 We'll briefly recap the BFF pattern, and then dive into a sample & learn how to reveal your OpenAPI specifications securely. duende.link/73hbw12 #dotnet #security #bff #openapi #aspnetcore
036
Erwin @vandervalk.pro · 16/04/2025
I love how spotify announced a price increase and then has a big outtage. It’s what my motivation to move to something else needed.
110
Reposted by Erwin
Duende Software @duendesoftware.com · 10/04/2025
Fresh Duende.AccessTokenManagement release candidate! 🔑 Named keys for IDistributedCache injection 💸 HybridCache (preview) 📊 Open Telemetry metrics, logs and traces 🏕️ Externalized cache key generation 🎉 and more! github.com/DuendeSoftwa... #dotnet #oidc #security
github.com
Release Duende.AccessTokenManagment 4.0.0 - RC1 · DuendeSoftware/foss
This release contains several important improvements and changes: Named key support for injecting a specific IDistributedCache instance. A preview feature that allows the use of HybridCache. This ...
054
Reposted by Erwin
Duende Software @duendesoftware.com · 09/04/2025
Secure your #VueJS apps with OpenID Connect & the BFF pattern! 🔒 We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together. duende.link/eshdrq4 #Security #OAuth2 #OpenIDConnect #dotnet
036
Reposted by Erwin
Duende Software @duendesoftware.com · 31/03/2025
How are you extending Duende.AccessTokenManagement? 🧐 We are looking at minimizing the public surface area of the library, and introducing targeted extensibility points. Weigh in and help shape what this will look like in v4 👉 github.com/orgs/DuendeS... #dotnet #security #oidc
github.com
How are you extending Duende.AccessTokenManagement? · DuendeSoftware · Discussion #140
As we work on adding new features to AccessTokenManagement, we've encountered some challenges with its current design, particularly regarding extensibility. The existing approach leans towards inhe...
054
Reposted by Erwin
Joe DeCock @jmdc.dev · 18/03/2025
Congrats to @vandervalk.pro and the whole team! I'm really excited to finally have our Blazor BFF Bits out there in the wild!
022
Reposted by Erwin
Duende Software @duendesoftware.com · 18/03/2025
Today brings you #IdentityServer 7.2! 🎁 1️⃣ Strict Audience Validation ensures that the audience is equal to the issuer and validates the token’s typ value. 2️⃣ Discovery Document Caching helps throughput in large deployments And more! 👉 duende.link/hjdsk82 #dotnet #aspnetcore
079
Reposted by Erwin
Duende Software @duendesoftware.com · 17/03/2025
Good news! We just released Duende Backend-for-Frontend (BFF) Security Framework V3. All the necessary components to secure browser-based frontends (e.g. SPAs or #Blazor applications) with #aspnetcore backends. duende.link/iuq3t4n #dotnet
146
Reposted by Erwin
Duende Software @duendesoftware.com · 19/02/2025
Using Duende.AccessTokenManagement? Upgrade to v3.2.0! Previous versions contain a race condition when requesting access tokens which may trigger errors in specific cases. Advisory: github.com/DuendeSoftwa... Discussion: github.com/orgs/DuendeS... #IdentityServer #Security #dotnet
github.com
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
### Summary Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing pr...
034
Reposted by Erwin
Maarten Balliauw @maartenballiauw.be · 06/02/2025
Let's try this GitHub discussions thing... Who's still on IdentityServer 4, and why? #dotnet github.com/orgs/DuendeS...
github.com
Who's still on IdentityServer 4, and why? · DuendeSoftware · Discussion #36
When looking at NuGet, I noticed IdentityServer 4 still has many downloads. Which makes me curious: who's still on IdentityServer 4, and why? Is it because your solution is locked on an older .NET ...
2412
Reposted by Erwin
Maarten Balliauw @maartenballiauw.be · 03/02/2025
If you're still on IdentityServer4, what's the reason?
203
Erwin @vandervalk.pro · 21/01/2025
Hmm… currently watching civil war. Not a feel good vibe. Especially not now.
000
Reposted by Erwin
Duende Software @duendesoftware.com · 15/01/2025
Duende IdentityServer v7.1.0 general availability release is now live. This release includes .NET 9 support, enhancements, bug fixes, performance improvements, and more. See the release notes: github.com/DuendeSoftwa... #dotnet
IdentityServer 7.1.0 is a significant release that includes:

.NET 9 support
Use of Duende.IdentityModel
New license usage helpers
Friendly READMEs in the NuGet packages
Improved log filtering when HTTP requests are aborted
Redaction of the subject token during token exchange
Improved extensibility of the ClientConfigurationStore in the Configuration API
Several bug fixes
Numerous small code quality and performance enhancements from the community
11312
Erwin @vandervalk.pro · 08/01/2025
Forged my own axe the other day, together with my son.
110
Erwin @vandervalk.pro · 03/01/2025
I'm absolutely delighted to announce that i've joined @duendesoftware.com as a Principal Engineer. I truly enjoyed my time at YuzeData, where I got to work (again) with some of my amazing friends and I'm very proud of how much we have achieved. It's absolutely been a blast!
152
Erwin @vandervalk.pro · 18/12/2024
Has anybody else experienced slowdowns with .net 9 compilation vs .net 8? I'm noticing it especially in ncrunch.
000
Reposted by Erwin
John Cutler @johncutle.fish · 20/11/2024
Some images from the Twitter years in a thread (since they are no longer accessible) 1/n
426262
Erwin @vandervalk.pro · 04/11/2024
Time to polish the swords again…
000
Erwin @vandervalk.pro · 31/10/2024
It's 'fun' to see (likely malicious) scanners at work when looking at access logs. For the system I'm working on, I periodically check the access logs. You can clearly see that our system is constantly being scanned by tools looking for vulnerabilities. Any system connected to the internet is.
100
Erwin @vandervalk.pro · 25/10/2024
When you're listening back to a badly AI transcribed meeting and you see this... your brain translates the badly transcribed text into something you actually hear. awkward
020