Author name: Tore Nestenius

Tore is an independent educator and consultant through his company TN-Datakonsult http://www.tn-data.se, where he specializes in training developers in .NET, Web Security, OpenID-Connect, architecture, and more. Tore regularly shares his knowledge about .NET on his blog https://nestenius.se, focusing on security and authentication.

Exploring the Forwarded Headers Middleware in ASP.NET Core

Exploring the Forwarded Headers Middleware in ASP.NET Core

Proxies are vital for load balancing and security, but they obscure the actual client IP, scheme, and domain, causing broken links, inaccurate logging, and other headaches. In this post, we’ll look at how ASP.NET Core’s Forwarded Headers Middleware restores these details so your services behave as though they’re directly on the public internet. What is […]

Exploring the Forwarded Headers Middleware in ASP.NET Core Read More »

AdditionalAuthorizationParameters in ASP.NET Core 9

AdditionalAuthorizationParameters in ASP.NET Core 9

In ASP.NET Core 9, a new feature called AdditionalAuthorizationParameters allows you to customize OAuth and OpenID Connect (OIDC) flows more quickly. This new feature allows developers to add custom authentication parameters without needing to rely on the complex workarounds that existed before ASP.NET Core 9 was released. Sounds familiar? Then you’re going to like this!

AdditionalAuthorizationParameters in ASP.NET Core 9 Read More »

IdentityServer In Docker Containers – Handle Logout (Part 4)

IdentityServer In Docker Containers – Handle Logout (Part 4)

In this final post in this series, we’ll now resolve logout challenges you might run into with IdentityServer, ensure proper sign-out redirects, and summarize the key takeaways from the series. Let’s complete the setup and finalize our IdentityServer configuration! This blog has been broken up into four separate posts: IdentityServer in Docker Containers: Adding Containers

IdentityServer In Docker Containers – Handle Logout (Part 4) Read More »

IdentityServer in Docker Containers: HTTPS and SameSite (Part 3)

IdentityServer in Docker Containers: HTTPS and SameSite (Part 3)

In this third part of the series, we tackle login issues in IdentityServer caused by cookie restrictions in HTTP and show how to resolve them by implementing HTTPS. We’ll guide you through securing communication between the host, client, and IdentityServer containers and configuring HTTPS in Docker to ensure everything runs smoothly. This blog has been

IdentityServer in Docker Containers: HTTPS and SameSite (Part 3) Read More »

IdentityServer in Docker Containers: Networking (Part 2)

IdentityServer in Docker Containers: Networking (Part 2)

This is part 2 of a blog series on containerizing a Duende IdentityServer and a client application. In this post, we resolve communication challenges that arise when these applications run in separate Docker containers. You’ll learn how to fix back-channel issues, handle localhost conflicts, and establish proper networking between the client and IdentityServer. This blog

IdentityServer in Docker Containers: Networking (Part 2) Read More »

Introducing the Cloud Debugger for Azure.

Introducing the Cloud Debugger for Azure

The Cloud Debugger is an open-source tool for Azure developers to explore, learn, and troubleshoot their Azure cloud environments. Whether preparing for Azure certification, looking to streamline debugging, or aiming to deepen your understanding of Azure, Cloud Debugger provides the tools to make the cloud more discoverable. Background – Getting Azure certified As I prepared

Introducing the Cloud Debugger for Azure Read More »