The Emergency Stop Button - Implementing Immediate Token Revocation in .NET 10

The 2025 OWASP Top 10 and IdentityServer

Update Guidance for CVE-2026-40372 - ASP.NET Data Protection

Why a Standard JWT Access Token Matters

The Identity Governance Checklist You Wish You Had Six Months Ago

The History and Future of SAML: Why a 20-Year-Old Protocol Still Matters

The Cookie Apocalypse Already Happened

Why Identity Is Infrastructure, Not a Feature

Verify - Open Source Sponsorship

Extending Duende IdentityServer Server-Side Sessions with Dynamic User Metadata

Give Your AI Coding Assistant Duende Expertise with Agent Skills and MCP Server

Triggering User Registration via OpenID Connect with Duende IdentityServer

Improving .NET Security Code with C# 14 Property Extensions

Developing Audit Logs with Duende IdentityServer Events

Patch Releases: Addressing CVE-2026-26127 in Microsoft.BCL.Memory

Client-Initiated Backchannel Authentication (CIBA) in ASP.NET Core 10 with Duende Identity Server

Rate Limiting IdentityServer Endpoints

It's Probably DNS - Can You Dig It?

Security Lingo Explained: Encode vs Encrypt vs Hash

Implementing Zero Trust with Resource Isolation

Security Lingo Explained: JWT

Announcing the Duende IdentityServer4 Migration Analysis Tool

DPoP Security for .NET APIs with JwtBearer Extensions v1.0.0

BenchmarkDotNet - Open Source Sponsorship

Security Lingo Explained: PAR