Discovering .NET codebases using code coverage and NCrunch
Exploring and discovering unfamiliar codebases is always a challenge. In this blog post, I will introduce a novel way to explore a new codebase by
.NET
Persisting the ASP.NET Core Data Protection Key Ring in Azure Key Vault
The Data Protection API (DPAPI) is an essential service in ASP.NET Core that is often overlooked. This post will give an overview of what it
Improving ASP.NET Core Security By Putting Your Cookies On A Diet
This blog post explores how we can improve the security of your ASP.NET Core authentication security by reducing the size of our cookies. Problem #1
Demystifying OpenID Connect’s State and Nonce Parameters in ASP.NET Core
In the world of web application security, OpenID Connect plays a key role in streamlining authentication processes. But what makes it really tick? In this
Exploring what is inside the ASP.NET Core cookies
ASP.NET Core issues several cookies, including authentication, antiforgery, and session cookies. This blog post will explore what these cookies contain and how they are protected.
Debugging cookie problems in ASP.NET Core
Troubleshooting cookie problems in ASP.NET Core I have answered over 1000 questions on Stack Overflow, and cookies are a common source of trouble for developers,
BearerToken: The new Authentication handler in .NET 8
In ASP.NET Core 8, Microsoft added a new authentication handler named BearerToken. In this blog post, I will explain how it works and its purpose.
Debugging JwtBearer Claim Problems in ASP.NET Core
A common problem when protecting your ASP.NET Core APIs is that expected claims are not found in the user object. In this blog post, I
Debugging OpenID Connect Claim Problems in ASP.NET Core
A common issue with OpenID Connect authentication in ASP.NET Core is that expected claims are missing from the ClaimsPrincipal user object. In this blog post,
Troubleshooting JwtBearer authentication problems in ASP.NET Core
A common question that I help developers with on Stack Overflow is how to troubleshoot authentication problems when using the JwtBearer handler. Here I provide
About me
My name is Tore Nestenius and I’m a trainer and senior software developer focusing on Architecture, Security and Identity, .NET, C#, Backend, and Cloud, among other things.