* Initial import of SAML code * Added missing SAML-relevant tests * Fixed compilation errors after rebasing XUnit V3 changes * Fixed subtle issues introduced in initial code import * Reworked test to use Kestrel based test hosts to allow cross-server communication * Eliminated odd value types to remain more consistent with code base * Do not enable SAML by default, but provide mechnism to opt-in * Base SAML test client * Add directions for configuring cert for SAML sample * Include encrypting assertions in SAML sample * Apply CT alias to SAML code * Dotnet format * Updated necessary SAML code after rebasing cooperative cancellation support * Updated SAML code to participate in cooperative cancellation * Fix name of SAML sign in state cookie |
||
|---|---|---|
| .config | ||
| .github | ||
| aspnetcore-authentication-jwtbearer | ||
| bff | ||
| conformance-report | ||
| docs-mcp | ||
| identity-server | ||
| shared | ||
| templates | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| Directory.Packages.props | ||
| global.json | ||
| hosts_and_clients.props | ||
| icon.png | ||
| LICENSE | ||
| products.slnx | ||
| products.slnx.v3.ncrunchsolution | ||
| products.v3.ncrunchsolution | ||
| README.md | ||
| src.props | ||
| templates.props | ||
| test.props | ||
Duende Products
This repository contains the core products developed by Duende Software.
Duende IdentityServer
Duende IdentityServer is a modern, standards-compliant OpenID Connect and OAuth 2.0 framework for ASP.NET Core, designed to provide secure authentication and API access control for modern applications. It supports a wide range of authentication flows, token types, and extension points for customization.
Duende BFF (Backend for Frontend)
The Backend for Frontend (BFF) pattern is a security architecture for browser-based JavaScript applications. It keeps access and refresh tokens on the server and eliminates the need for CORS, providing improved security for your web applications.
AspNet Core JWT Bearer Authentication Extensions
Extends the ASP.NET Core JWT Bearer authentication handler with support for OAuth 2.0 Demonstrating Proof-of-Possession (DPoP), enhancing security for bearer tokens by proving possession of a private key.
License
By accessing the Duende Products code here, you are agreeing to the licensing terms.
Contributing
Please see our contributing guidelines.