Category .NET Core
Use Aspire to implement and deploy the BFF security architecture
This blog demonstrates how to use Aspire to set up a solution for developing and deploying an ASP.NET Core web application with Auth0 as the identity provider and a downstream API. The application uses Angular for the frontend and is secured using a Backend-for-Frontend (BFF) architecture. Code: https://github.com/damienbod/Auth0BffDpopApi Blogs in this series Target setup In […]
Implement BFF using Auth0, Angular and ASP.NET Core
This post should how to implement a web application which needs secure access and secure identities. The application uses Angular as the UI tech, ASP.NET Core as the backend tech and a backend for frontend security architecture using OpenID Connect, OAuth and Auth0 as the identity provider. Code: https://github.com/damienbod/Auth0BffDpopApi Blogs in this series Target setup […]
Implement SAML as an external provider in an ASP.NET Core Identity application using Duende as an OIDC server
This article shows how to implement a SAML federation from an ASP.NET Core Identity application using Sustainsys.Saml2.AspNetCore2. Entra ID is used to implement the SAML authentication and the users can authenticate from the tenant. Code: https://github.com/damienbod/DuendeEntraSaml Setup Three components are used to implement this demo, a web application that authenticates using OpenID Connect, an ASP.NET […]
ASP.NET Core background tasks with NCronJob and SignalR
I was recommended NCronJob for implementing a background worker in ASP.NET Core and so I decided to give it a try, read the docs and learn this. This NuGet package is open source and works great. I implemented two simple jobs, one concurrent and one not concurrent which sends messages via SignalR. Code: https://github.com/damienbod/AspNetCoreNCronJob To […]
Aspire Azure SQL deployment bug
This week, I was updating my Aspire applications after the latest release and I ran into a deployment bug for my test deployments. I could no longer deploy the database to Azure SQL. I got the following error: The error is caused by the latest Azure changes and the Aspire updates. To fix, I need […]
Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph
Configurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks at implementing this with an delegated user credential as well as an application client credential. Code: https://github.com/damienbod/EntraIdTokenLifeTimePolicies The code example was initially created using […]
Add application security to the swiyu generic management verifier APIs using OAuth
The article looks at implementing security using OAuth for the swiyu Public Beta Trust Infrastructure generic containers. The container provides endpoint for OpenID verification and the management APIs. The OpenID endpoints are publicly accessible using a reverse proxy, the management APIs can only be accessed in the network and using an access token for app […]
Isolate the swiyu Public Beta management APIs using YARP
This post looks at hardening the security for the swiyu public beta infrastructure. The generic containers provide both management APIs and wallet APIs which support the OpenID for Verifiable Presentations 1.0 specification. The management APIs require both network protection and application security. This post looks at implementing the network isolation. Code: https://github.com/swiss-ssi-group/swiyu-passkeys-idp-loi-loa Blogs in this […]
Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR
This post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR). Code: https://github.com/swiss-ssi-group/swiyu-passkeys-idp-loi-loa Blogs in this series: Setup An ASP.NET code application is setup to authentication using OpenID Connect and OAuth PAR. The web application is an OIDC […]
Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende
This article explores how to implement Level of Identification (LOI) in an ASP.NET Core application. The solution uses Duende IdentityServer as the OpenID Connect provider and ASP.NET Core Identity for user management. Identity verification is performed using the Swiyu Public Beta infrastructure. Any OpenID Connect client can consume the loi claim together with the loa […]
Software Engineering 