Wesley Cabus

*Are you sure your access tokens are really secure?* by @WesleyCabus is a really great talk that exposes common validation mistakes that let attackers use forged tokens and explains how to prevent them. @NDC_Conferences youtube.com/watch?v=Jc1Drb…

Shape the future of Duende products! Early Access!! Deep Collaboration!!! Better Security and Identity!!!! Apply Now for Duende Product Insiders! duende.link/discord #dotnet #security #identity

Hey @BlizzardCSEU_EN , if you organize a survey again in the future and don't want to list every country, at least include the option "Other"

Claims and scopes describe user information in OpenID Connect. Let's see how Duende IdentityServer handles consent, different client types, required vs. optional scopes, and what happens when a client doesn't get everything it asked for. duende.link/97aeqlj 👀 #dotnet

Adding .NET 10 Passkey Support to Duende IdentityServer 👉 duende.link/berqe86 Learn how to add #dotnet 10 passkey support to a non-Blazor project such as MVC or Razor Pages. #security #aspnetcore #identity #webauthn

Our next livestream with Active Solution is coming up soon! Custom Authentication in #aspdotnet Core Go beyond the built-in authentication handlers in ASP.NET and learn about a RemoteAuthenticationHandler. Register 👉 duendesoftware.com/webinars/build… #identity

We're happy to start sponsoring the Spectre.Console project! It is a #dotnet library that makes it easier to create beautiful console applications by giving you access to standard components you may find in a CLI experience. Go check it out! duende.link/sp3ctr3

@bartreyserhove @BrusselsAirport Damn, I must’ve been very lucky 😅! When I went through there Wednesday morning, there was no cue at all

Border control queue at @BrusselsAirport . Such a shame this cannot be organised more smoothly

Say goodbye ✋ to passwords, and hello 👋 to secure, phishing-resistant logins: passkey credentials. Part 1 of our 4-part blog series covers password and authentication evolution. Longread ahead! 👀 duende.link/p455k3y #passkeys #webauthn #dotnet #security #aspnetcore

Roland's video series continues! Let's see how to protect SPAs with OpenID Connect created with libraries like #Angular and #React or plain javascript. We'll see why you want to use a BFF & how it makes secure API access less cumbersome youtu.be/pSTMCyQH_E4 #dotnet

Brace yourself, w̶i̶n̶t̶e̶r̶ #dotnet 10 is coming! ⛄️ Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. duende.link/qet4wp9 #aspnetcore

Last week's livestream with .NET MVP Tore Nestenius is now available on YouTube. Demystifying Authentication in #aspnetcore Core Take a hands-on deep dive into the world of authentication. youtube.com/watch?v=8tZQGJ… #dotnet #security #identity

Let's explore the world of OpenID Connect with a focus on claims, scopes, and how Duende IdentityServer facilitates authentication in #dotnet applications. Learn how apps request necessary claim information! 👩🏼‍🏫 duende.link/j28b2bw #security #identity #aspnetcore

I’m speaking at #Cyberintersect this October in Orlando! 🎤 Don’t miss the keynote with @shanselman & @coolcsh: “What Does It Mean to Be a Developer Next Year?” — here’s a highlight👇 x.com/DEVintersectio… Use discount code CABUS150 for $150 off the registration!

HttpClient is at the heart of many projects. DelegatingHandlers let you intercept and modify requests and responses, extending base functionality. Let's look at DelegatingHandler and how it can make HttpClient even more powerful! 💪 duende.link/78qe4kj #dotnet #aspnetcore

#UCP24 | 𝐔𝐩𝐝𝐚𝐭𝐞 𝐓𝐚𝐥𝐤 𝐰𝐢𝐭𝐡 @TechMike2kX Full house, biggest stage, and a session that mixed sci-fi with cloud patterns. Mike Martin’s 12 Monkeys talk was a hit at Update Conference Prague 2024! ✔️ Link here 📲 youtube.com/watch?v=u14Y72… In our interview, Mike said how much he loved the energy in the room and seeing developers connect with Reliable Web Apps + 12 Factor methodology in a whole new way. His mission? To make us think differently about building apps that can survive anything and he nailed it ✨ 👉 Rewatch his full session now on our YouTube Channel! youtube.com/watch?v=u14Y72… Plus check out the other standout talks Mike recommends: ✨Isaac Levin – Application Insights ✨Suzanne Daniels – The golden path to self-service with guardrails ✨Wesley Cabus – Hardening ASP.NET Core Web applications (a must-watch for solution design) ▶️ Dive into all sessions on the Update NOW Portal: now.updateconference.net/event/update-c… #UpdateConference #Cloud #Architecture #Azure #Web #Serverless @isaacrlevin @suushier @WesleyCabus youtube.com/watch?v=u14Y72…

Duende #IdentityServer v7.3 is now available! 📢 👉 This new release includes quick start templates that accelerate your development time. From ideation to proof-of-concept in less than ONE HOUR. Read more on our blog ➡️ duende.link/is73b1t #dotnet #security #identity

We're at #kcdc2025 Stop by and register to win a NASA Artemis Space Launch System LEGO set. Or just say hello and meet the Duende team. Learn more about our newly released Duende #IdentityServer v7.3 with FAPI 2.0. #dotnet #security #identity

This weekend, I've released another version of PackageGuard, a fully open-source tool to get a grip on your open-source packages. Version 1.5 includes a couple of new features as well as bug fixes. - Add support for the .slnx solution file format - Add support for denying prerelease packages - Display PackageGuard version in output log - Fix license detection of NUnit and NETStandard.Library Read more about PackageGuard at #readme" target="_blank" rel="nofollow noopener">github.com/dennisdoomen/p…

What are Best Practices of Web Application Security in 2025? This post focuses on key security and authentication flows using OAuth 2.0 and OpenID Connect, flows to avoid, security measures to implement, and IETF Best Current Practices. duende.link/iyqe3fk #security #dotnet