Monthly Archives: September 2019

Use explicit typing for your JWTs

Posted on September 13, 2019 by Dominick Baier

JWTs are being used in many places these days – identity tokens, access tokens, security events, logout tokens… You actually have to be careful when validating a JWT that you don’t mistakenly confuse it with a JWT that was issued … Continue reading →

Posted in IdentityServer, OAuth | 2 Comments

Two is the magic Number

Posted on September 9, 2019 by Dominick Baier

..and not 3. To build authentication systems for modern applications, all you need to understand are two OpenID Connect / OAuth 2.0 flow. That’s it. Client Credentials Flow This is probably the simplest flow and it is designed for server … Continue reading →

Posted in ASP.NET Core, IdentityServer, OAuth, OpenID Connect | Leave a comment

IdentityServer for ASP.NET Core 3

Posted on September 8, 2019 by Dominick Baier

In short: is released (along with the introspection and access control validation handler). As part of the longer version, you might ask yourself how we can do that before ASP.NET Core 3 itself is released. Well – it’s a slightly complicated … Continue reading →

Posted in ASP.NET Core, IdentityServer, Uncategorized | 4 Comments