IdentityServer In Docker Containers – Handle Logout (Part 4)
How to fix logout for IdentityServer in Docker containers: sign-out redirects, id_token_hint and the IDX10205 issuer error, solved with a static IssuerUri.
Read more →Posts, page 2 of 3
-
-
IdentityServer in Docker Containers: HTTPS and SameSite (Part 3)
Why the IdentityServer login fails over HTTP in Docker (SameSite and Secure cookies) and how to fix it with HTTPS and the ASP.NET Core dev certificate. Part 3.
Read more → -
IdentityServer in Docker Containers: Networking (Part 2)
How to fix networking between IdentityServer and a client in Docker Compose: service names, internal ports, MetadataAddress and the issuer mismatch. Part 2.
Read more → -
IdentityServer in Docker Containers - Part 1
How to run Duende IdentityServer and an ASP.NET Core client in separate Docker containers with Docker Compose, and why localhost fails between them. Part 1.
Read more → -
Pushed Authorization Requests (PAR) in ASP.NET Core 9
What Pushed Authorization Requests (PAR) are, why they make OpenID Connect sign-in safer, and how to use them in ASP.NET Core 9 with Duende IdentityServer.
Read more → -
Introducing the Cloud Debugger for Azure
Cloud Debugger is an open-source tool I built to explore and troubleshoot Azure, with over 30 tools for App Service, storage, messaging and identity.
Read more → -
User Delegation SAS Tokens In Azure Explained
Account key or user delegation key? How a user delegation SAS works in Azure, why it is safer, and how to create one in C# with a managed identity.
Read more → -
Running Docker in an Azure Windows Virtual Machine – Not so fast!
Why Docker won't start in a new Azure Windows VM: Trusted Launch, the default security type, disables virtualization. The fix is the Standard security type.
Read more → -
Deploy Container to Azure App Services with System-Assigned Identity
How to deploy a container from a private Azure Container Registry to Azure App Service using Azure CLI and a system-assigned managed identity to pull the image.
Read more → -
Deploy containers to Azure App Services using user-assigned managed identity
How to deploy a container from a private Azure Container Registry to Azure App Service with Azure CLI, using a user-assigned managed identity to pull the image.
Read more → -
Discovering .NET codebases using code coverage and NCrunch
How to learn an unfamiliar .NET codebase by running a single test with NCrunch code coverage and Runtime Data Inspection, shown on the MSAL.NET library.
Read more → -
DefaultAzureCredential Under the Hood
How DefaultAzureCredential works in .NET: the order it tries credentials, why it can be slow, which one it used, and when ChainedTokenCredential is better.
Read more → -
Introducing the Data Protection API Key Ring Debugger
A small ASP.NET Core debugger I wrote to look inside the Data Protection key ring: create and revoke keys, and view the encryptor, repository and stored keys.
Read more → -
Persisting the ASP.NET Core Data Protection Key Ring in Azure Key Vault
How to persist the ASP.NET Core Data Protection key ring in Azure Key Vault with a custom IXmlRepository, what the key ring does, and the Key Vault size limit.
Read more → -
Improving ASP.NET Core Security By Putting Your Cookies On A Diet
How to shrink the ASP.NET Core authentication cookie with a session store (ITicketStore), and why it is safer: a stolen cookie can't be reused after sign-out.
Read more → -
Demystifying OpenID Connect's State and Nonce Parameters in ASP.NET Core
What is inside the OpenID Connect state and nonce parameters in ASP.NET Core? I decrypt the state, add custom properties and show how the nonce is used.
Read more →
