Erwin's Avatar

Erwin

@vandervalk.pro

Software Architect | c# | dotNet | cloud | Parent | Swordsman | Metal Head | History and Science Enthusiast| Principal Engineer @ Duende Software

45
Followers
53
Following
39
Posts
22.10.2024
Joined
Posts Following

Latest posts by Erwin @vandervalk.pro

Post image

I wanted an inspirational picture that describes 'the next steps' for a product presentation. What I got was an image of a one legged person committing suicide.

22.07.2025 07:57 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
from the actual spec

from the actual spec

from chatgtp

from chatgtp

"LLM's are great for interrogating large pieces of text"

Only if you don't care if the result is actually correct. Like with specs.

03.06.2025 09:41 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
Token Management We help companies using .NET to build identity and access control solutions for modern applications.

Livestream coming up! πŸ“Ί

Token Management: Applying the Duende Backend for Frontend (BFF) Security Framework

πŸ—“οΈ June 4, 2025
⏱️ 10 EST / 16:00 CEST / 14:00 UTC
πŸ—£οΈ Speaker: Erwin van der Valk

Register here: duende.link/wj42025 #dotnet #security #bff

19.05.2025 11:02 πŸ‘ 3 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0
Preview
.NET Rocks! .NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.

OAuth 2.0 is powerful, but simple when it comes to dealing with multiple clients.

@vandervalk.pro talks on .NET Rocks at www.dotnetrocks.com/details/1950 about using the Backend for Frontend (BFF) Security Framework to simplify your OAuth 2.0 implementation!

15.05.2025 15:03 πŸ‘ 6 πŸ” 2 πŸ’¬ 0 πŸ“Œ 0
Preview
.NET Rocks! .NET Rocks! is a weekly talk show for anyone interested in programming on the Microsoft .NET platform. The shows range from introductory information to hardcore geekiness.

This week's .NET Rocks! features Erwin van der Valk talking about the Backend for Frontend (BFF) pattern and how it can be used to secure browser-based applications.

Tune in at duende.link/1950dnr 🎧 #dotnet #bff #security #aspnetcore

15.05.2025 12:30 πŸ‘ 2 πŸ” 5 πŸ’¬ 0 πŸ“Œ 0

Absolutely honored to have been on the Dotnet Rocks show with @richcampbell.bsky.social and @carlfranklin.bsky.social to talk about the BFF security pattern.

Check it out at: www.dotnetrocks.com/details/1950

15.05.2025 07:15 πŸ‘ 6 πŸ” 3 πŸ’¬ 1 πŸ“Œ 0
Preview
Data Protection for ASP.NET Core Developers and Duende IdentityServer We help companies using .NET to build identity and access control solutions for modern applications.

Data Protection in #aspnetcore is an essential part of securing applications while maintaining the capabilities to scale out to meet user demand. But how does it work?

Learn more on our blog: duende.link/ywet6ag #dotnet #aspnetcore #identity

02.05.2025 12:30 πŸ‘ 3 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0
Post image

Managing OpenAPI Specifications with Backend For Frontend and Swagger UI πŸ“š

We'll briefly recap the BFF pattern, and then dive into a sample & learn how to reveal your OpenAPI specifications securely.

duende.link/73hbw12 #dotnet #security #bff #openapi #aspnetcore

30.04.2025 13:30 πŸ‘ 4 πŸ” 6 πŸ’¬ 0 πŸ“Œ 0

I love how spotify announced a price increase and then has a big outtage. It’s what my motivation to move to something else needed.

16.04.2025 15:40 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
Preview
Release Duende.AccessTokenManagment 4.0.0 - RC1 Β· DuendeSoftware/foss This release contains several important improvements and changes: Named key support for injecting a specific IDistributedCache instance. A preview feature that allows the use of HybridCache. This ...

Fresh Duende.AccessTokenManagement release candidate!

πŸ”‘ Named keys for IDistributedCache injection
πŸ’Έ HybridCache (preview)
πŸ“Š Open Telemetry metrics, logs and traces
πŸ•οΈ Externalized cache key generation
πŸŽ‰ and more!

github.com/DuendeSoftwa...

#dotnet #oidc #security

10.04.2025 13:00 πŸ‘ 6 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0
Post image

Secure your #VueJS apps with OpenID Connect & the BFF pattern! πŸ”’

We’ll look at the basic architecture of a BFF solution, the responsibilities of each component, and how it all fits together.

duende.link/eshdrq4

#Security #OAuth2 #OpenIDConnect #dotnet

09.04.2025 12:27 πŸ‘ 4 πŸ” 6 πŸ’¬ 0 πŸ“Œ 0
Preview
How are you extending Duende.AccessTokenManagement? Β· DuendeSoftware Β· Discussion #140 As we work on adding new features to AccessTokenManagement, we've encountered some challenges with its current design, particularly regarding extensibility. The existing approach leans towards inhe...

How are you extending Duende.AccessTokenManagement? 🧐

We are looking at minimizing the public surface area of the library, and introducing targeted extensibility points.

Weigh in and help shape what this will look like in v4 πŸ‘‰ github.com/orgs/DuendeS... #dotnet #security #oidc

31.03.2025 10:01 πŸ‘ 5 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0

I hope they didn’t put the plates in skewed… otherwise, there is no hope left.

23.03.2025 20:58 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Congrats to @vandervalk.pro and the whole team! I'm really excited to finally have our Blazor BFF Bits out there in the wild!

18.03.2025 23:42 πŸ‘ 2 πŸ” 2 πŸ’¬ 0 πŸ“Œ 0
Post image

Today brings you #IdentityServer 7.2! 🎁

1️⃣ Strict Audience Validation ensures that the audience is equal to the issuer and validates the token’s typ value.
2️⃣ Discovery Document Caching helps throughput in large deployments

And more! πŸ‘‰ duende.link/hjdsk82 #dotnet #aspnetcore

18.03.2025 16:12 πŸ‘ 7 πŸ” 9 πŸ’¬ 0 πŸ“Œ 1
Post image

Good news! We just released Duende Backend-for-Frontend (BFF) Security Framework V3.

All the necessary components to secure browser-based frontends (e.g. SPAs or #Blazor applications) with #aspnetcore backends.

duende.link/iuq3t4n #dotnet

17.03.2025 14:03 πŸ‘ 4 πŸ” 6 πŸ’¬ 1 πŸ“Œ 0

This would be funny if it wasn’t accurate

25.02.2025 18:55 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens ### Summary Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing pr...

Using Duende.AccessTokenManagement? Upgrade to v3.2.0!

Previous versions contain a race condition when requesting access tokens which may trigger errors in specific cases.

Advisory: github.com/DuendeSoftwa...
Discussion: github.com/orgs/DuendeS...

#IdentityServer #Security #dotnet

19.02.2025 08:17 πŸ‘ 3 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0
Preview
Who's still on IdentityServer 4, and why? Β· DuendeSoftware Β· Discussion #36 When looking at NuGet, I noticed IdentityServer 4 still has many downloads. Which makes me curious: who's still on IdentityServer 4, and why? Is it because your solution is locked on an older .NET ...

Let's try this GitHub discussions thing... Who's still on IdentityServer 4, and why? #dotnet

github.com/orgs/DuendeS...

06.02.2025 11:05 πŸ‘ 4 πŸ” 12 πŸ’¬ 2 πŸ“Œ 0

If you're still on IdentityServer4, what's the reason?

03.02.2025 17:21 πŸ‘ 0 πŸ” 3 πŸ’¬ 2 πŸ“Œ 0

Hmm… currently watching civil war. Not a feel good vibe. Especially not now.

21.01.2025 17:43 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Aspire - Build/Test Issues - NCrunch Forum Aspire: Hi, Merry Christmas, all the best to you and all the developers - thanks for a great product. Today I stumbled on an issue however. In my existing solution, I wanted to start checking out Aspi...

forum.ncrunch.net/Default.aspx.... If you read the last comment from the author of NCrunch (Remco). NCrunch is a fantastic testrunner so it would be awesome if somehow NCrunch and Aspire could work together.

19.01.2025 08:14 πŸ‘ 0 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

Would this also help getting aspire projects to work under ncrunch?

19.01.2025 06:38 πŸ‘ 0 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
IdentityServer 7.1.0 is a significant release that includes:

.NET 9 support
Use of Duende.IdentityModel
New license usage helpers
Friendly READMEs in the NuGet packages
Improved log filtering when HTTP requests are aborted
Redaction of the subject token during token exchange
Improved extensibility of the ClientConfigurationStore in the Configuration API
Several bug fixes
Numerous small code quality and performance enhancements from the community

IdentityServer 7.1.0 is a significant release that includes: .NET 9 support Use of Duende.IdentityModel New license usage helpers Friendly READMEs in the NuGet packages Improved log filtering when HTTP requests are aborted Redaction of the subject token during token exchange Improved extensibility of the ClientConfigurationStore in the Configuration API Several bug fixes Numerous small code quality and performance enhancements from the community

Duende IdentityServer v7.1.0 general availability release is now live. This release includes .NET 9 support, enhancements, bug fixes, performance improvements, and more.

See the release notes: github.com/DuendeSoftwa... #dotnet

15.01.2025 12:41 πŸ‘ 13 πŸ” 12 πŸ’¬ 1 πŸ“Œ 1
Post image
08.01.2025 17:09 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Post image

Hot metal

08.01.2025 17:09 πŸ‘ 0 πŸ” 0 πŸ’¬ 2 πŸ“Œ 0
Post image

Forged my own axe the other day, together with my son.

08.01.2025 17:09 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

Don’t get wireless / wifi camera’s. They are very easily blocked by a wifi jammer.

04.01.2025 18:21 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

Yeah, security has to be part of your process. It's not a 'task' you perform somewhere during the process and it's never complete.

03.01.2025 09:50 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Now I get to work again with an amazing team at @duendesoftware.com , in a very exiting space with people I really admire! Exciting times ahead!

03.01.2025 09:44 πŸ‘ 2 πŸ” 1 πŸ’¬ 2 πŸ“Œ 0