Damien Bowden

Damien Bowden

@damienbod.com

Web developer. application security consultant, Microsoft MVP #aspnetcore #openid #oauth2 #security #dotnet #azure #identity #angular #fido2 #passkeys #iam #graph #ssi #m365 #entraid #iam

2K followers795 following202 posts

Damien Bowden
@damienbod.com

New OSS repo: - OpenID Connect using Open.IdentityServer from RockSolidKnowledge/ - Aspire - OAuth PAR - client assertion - OIDC confidential client, PKCE - passkeys - ASP.NET Core Identity, EF Core SQL github.com/damienbod/Oi... #openid #oauth #aspire #aspnetcore #par #identity #passkeys #iam

github.comGitHub - damienbod/OidcOpenIdentityServer: Open.IdentityServer demo using Aspire and ASP.NET CoreOpen.IdentityServer demo using Aspire and ASP.NET Core - damienbod/OidcOpenIdentityServer

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core - Exploring the .NET 11 preview - Part 8 andrewlock.net/exploring-th... In this post I look at the new experimental support for DBSC coming in .NET 11 #dotnet #security #aspnetcore

andrewlock.netExperimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Understanding Device Bound Session Credentials (DBSC) andrewlock.net/understandin... In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works. #security #dotnet

andrewlock.netUnderstanding Device Bound Session Credentials (DBSC)In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: The pain of serializing unions and closed class hierarchies with System.Text.Json in .NET 11 andrewlock.net/exploring-th... In this post I discuss the System.Text.Json support for unions and closed hierarchies coming in .NET 11, the decisions made and some of the sharp edges I hit #dotnet

andrewlock.netThe pain of serializing unions and closed class hierarchies with System.Text.Json: Exploring the .NET 11 preview - Part 7In this post I discuss the System.Text.Json support for unions and closed hierarchies coming in .NET 11, the decisions made, and some of the sharp edges I hit
Damien Bowden
@damienbod.com

Blogged: Using multiline Parameters for Aspire and ASP.NET Core with user secrets and Azure default deployments damienbod.com/2026/09/01/u... #aspire #aspnetcore #dotnet #azure #aca #biceps #pem

damienbod.comUsing multiline Parameters for Aspire and ASP.NET Core with user secrets and Azure default deploymentsMultiple line secrets or configuration do not work in Aspire per default. An example of this is using a PEM file for certificates. This posts shows how the multiple line configuration parameters ca…
Damien Bowden
@damienbod.com

Blogged: Implement SAML as an external provider in an ASP.NET Core Identity application using Duende as an OIDC server. damienbod.com/2026/07/27/i... #aspnetcore #saml #dotnet #duende #entraid #entra #identity #iam

damienbod.comImplement SAML as an external provider in an ASP.NET Core Identity application using Duende as an OIDC serverThis article shows how to implement a SAML federation from an ASP.NET Core Identity application using Sustainsys.Saml2.AspNetCore2. Entra ID is used to implement the SAML authentication and the use…

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Exploring the .NET 11 preview - Part 3 - Avoiding ToString() allocations with StringBuilder.MoveChunks andrewlock.net/exploring-th... In this post I take a look at the new MoveChunks() API, explore how it works, what it's for, and how the new API provides opportunities for public APIs

andrewlock.netAvoiding ToString() allocations with StringBuilder.MoveChunks: Exploring the .NET 11 preview - Part 3in this post I take a short look at the new MoveChunks API, explore how it works, what it's for, and how the new API provides opportunities for public APIs

Damien Bowden reposted

Duende Software
@duendesoftware.com

SAML 2.0 is now in Duende IdentityServer! 🛡️ Easily integrate SAML-only SaaS apps like HubSpot and Salesforce into your existing SSO setup. Here's a blog post showing you how: duende.link/wtqw42y #dotnet #IdentityServer

duende.linkSetting Up SAML Single Sign-On in ASP.NET with Duende IdentityServerSAML 2.0 is now in Duende IdentityServer! Easily integrate SAML-only SaaS apps like HubSpot and Salesforce into your existing SSO setup.

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: .NET finally gets union types🎉 - Exploring the .NET 11 preview - Part 2 andrewlock.net/exploring-th... In this post I discuss the support for union types released in .NET 11, how they're implemented, the choices made, and how to create your own union types #dotnet

andrewlock.net.NET finally gets union types🎉: Exploring the .NET 11 preview - Part 2In this post I discuss the support for union types released in .NET 11, how they're implemented, the choices made, and how to create your own

Damien Bowden reposted

olegkarasik.bsky.social
@olegkarasik.bsky.social

One more issue of .NET R&D Digest is here! Thanks to @martinfowler.com, @kentbeck.com, @andrewlock.bsky.social, @b0rk.jvns.ca, and other great authors for the amazing content! olegkarasik.wordpress.com/2026/06/05/n... #dotnet

olegkarasik.wordpress.com.NET R&D Digest (May, 2026)This issue includes bits of AI (too much AI), C#, software development, architecture, Windows, security, NTFS and of course .NET and .NET Internals.

Damien Bowden reposted

Marc Rufer
@rufer.be

Blogged: [HOWTO] Delete Azure DevOps users with principalName starting with OIDCONFLICT_UpnReuse_ #azuredevops #ado #graph #powershell #posh

blog.rufer.be[HOWTO] Delete Azure DevOps users with principalName starting with OIDCONFLICT_UpnReuse_In Azure DevOps organizations that are connected to Microsoft Entra, you may spot (duplicated) users with email prefixed with OIDCONFLICT_UpnReuse_{OID_HERE} (i.e. when trying to give them access or when mentioning them): Such users are neither visible in the Azure DevOps Web UI under Organization settings > General > Users nor when querying all users via graph or via the Azure DevOps CLI.
Damien Bowden
@damienbod.com

Blogged: Using configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft Graph damienbod.com/2026/05/11/u... #graph #dotnet #entra #entraid #jwt #oauth #oidc #openidconnect

damienbod.comUsing configurable token lifetimes in Microsoft Entra ID, .NET and Microsoft GraphConfigurable token lifetimes in the Microsoft identity platform went GA and I thought I would look at implementing this using a .NET console application using Microsoft Graph . This article looks a…

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Configuring contextual options with Microsoft.Extensions.Options.Contextual andrewlock.net/configuring-... In this post I take a brief look at the Microsoft.Extensions.Options.Contextual package to understand what it's for, how to use it, and discuss whether to use it or not #dotnet

andrewlock.netConfiguring contextual options with Microsoft.Extensions.Options.ContextualIn this post I take a brief look at the Microsoft.Extensions.Options.Contextual package to understand what it's for, how to use it, and whether to use it or not
Damien Bowden
@damienbod.com

Updated: OpenIddict examples using BFF with Angular and Vue.js github.com/damienbod/bf... github.com/damienbod/bf... Support for passkeys. #aspnetcore #dotnet #angular #vuejs #bff #openiddict #openidconnect #oidc #passkeys

github.comGitHub - damienbod/bff-openiddict-aspnetcore-angular: OpenIddict backend for frontend security using Angular CLI and ASP.NET Core backendOpenIddict backend for frontend security using Angular CLI and ASP.NET Core backend - damienbod/bff-openiddict-aspnetcore-angular

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Recording metrics in-process using MeterListener andrewlock.net/recording-me... In this post I show how you can use MeterListener to listen to Instrument measurements, how to trigger Observable measurements, and how to aggregate values #dotnet #observability

andrewlock.netRecording metrics in-process using MeterListener: System.Diagnostics.Metrics APIs - Part 4In this post I show how you can use MeterListener to listen to Instrument measurements, how to trigger Observable measurements, and how to aggregate values.
Damien Bowden
@damienbod.com

Updated: OpenIddict with Angular and Blazor WASM BFF OpenID Connect Code Flow with PKCE clients and ASP.NET Core APIs github.com/damienbod/As... #openiddict #passkeys #openid #oauth #grpc #angular #net10 #dotnet

github.comGitHub - damienbod/AspNetCoreOpenIddict: OpenIddict with Angular and Blazor WASM BFF OpenID Connect Code Flow with PKCE clients and ASP.NET Core APIsOpenIddict with Angular and Blazor WASM BFF OpenID Connect Code Flow with PKCE clients and ASP.NET Core APIs - GitHub - damienbod/AspNetCoreOpenIddict: OpenIddict with Angular and Blazor WASM BFF ...

Damien Bowden reposted

Cloudflare
@cloudflare.social

In case you missed it: the number of DDoS attacks more than doubled in 2025. The network layer is under particular threat as hyper-volumetric attacks grew 700%. blog.cloudflare.com/ddos-threat-...

blog.cloudflare.com2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaultsThe number of DDoS attacks more than doubled in 2025. The network layer is under particular threat as hyper-volumetric attacks grew 700%.
Damien Bowden
@damienbod.com

Blogged: Add application security to the swiyu generic management verifier APIs using OAuth damienbod.com/2026/02/16/a... #aspnetcore #oauth #swiyu #swiss #openid #yarp #aspire #container #api #iam #security #dotnet

damienbod.comAdd application security to the swiyu generic management verifier APIs using OAuthThe article looks at implementing security using OAuth for the swiyu Public Beta Trust Infrastructure generic containers. The container provides endpoint for OpenID verification and the management …

Damien Bowden reposted

Andrew Lock "Sock"
@andrewlock.bsky.social

Blogged: Creating and consuming metrics with System.Diagnostics.Metrics APIs andrewlock.net/creating-and... In this post I provide an introduction to the System.Diagnostics.Metrics API, show how to create a custom metric, and show how to read it with dotnet-counters #dotnet

andrewlock.netCreating and consuming metrics with System.Diagnostics.Metrics APIsIn this post I provide an introduction to the System.Diagnostics.Metrics API, and show how to create a custom metric and read it with dotnet-coutners
Damien Bowden
@damienbod.com

Blogged: Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR damienbod.com/2026/02/02/u... #dotnet #aspnetcode #oidc #oauth #par #dpop #identity #duende #aspire #oss #iam #swiyu

damienbod.comUse client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PARThis post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR…
Damien Bowden
@damienbod.com

Awesome .NET, Swiss Identity event in Zurich on Thursday 5th February We have a super lineup, great topics and great speakers. It would be great to see you there. All are welcome. www.meetup.com/dotnet-zuric... #dotnet #swiss #zurich #iam #identity #iam #mcp #oss #community

meetup.comFebruary DOTNET Zurich @isolutions, Thu, Feb 5, 2026, 6:00 PM | Meetup**5th February - DotNet Zurich @ Isolutions** *Join us in person at Isolutions!!* This event will happen at Isolutions, The Circle. **Agenda:** * 17:45 Reception open &
Damien Bowden
@damienbod.com

Blogged: Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende damienbod.com/2026/01/18/i... #aspnetcore #oauth #openid #dotnet #oidc #iam #swiyu #aspire #oss #identity #eid #swiss #bit #gov #loi #loa #blazor #duende

damienbod.comImplementing Level of Identification (LoI) with ASP.NET Core Identity and DuendeThis article explores how to implement Level of Identification (LOI) in an ASP.NET Core application. The solution uses Duende IdentityServer as the OpenID Connect provider and ASP.NET Core Identity…