Mastodawn

Blogged: Secure the swiyu container using a YARP proxy

https://damienbod.com/2026/02/09/isolate-the-swiyu-public-beta-management-apis-using-yarp/

#swiyu #yarp #aspire #aspnetcore #dotnet #identity #network #oauth #openidconnect #oidc

Isolate the swiyu Public Beta management APIs using YARP

This post looks at hardening the security for the swiyu public beta infrastructure. The generic containers provide both management APIs and wallet APIs which support the OpenID for Verifiable Prese…

Software Engineering

damienbod Feb 2

Blogged: Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR

https://damienbod.com/2026/02/02/use-client-assertions-in-asp-net-core-using-openid-connect-oauth-dpop-and-oauth-par/

#dotnet #aspnetcode #oidc #oauth #par #dpop #identity #duende #aspire #oss #iam #swiyu

Use client assertions in ASP.NET Core using OpenID Connect, OAuth DPoP and OAuth PAR

This post looks at implement client assertions in an ASP.NET Core application OpenID Connect client using OAuth Demonstrating Proof of Possession (DPoP) and OAuth Pushed Authorization Requests (PAR…

Software Engineering

damienbod Feb 1

Awesome .NET, Swiss Identity event in Zurich on Thursday 5th February

We have a super lineup, great topics and great speakers. It would be great to see you there. All are welcome.

https://www.meetup.com/dotnet-zurich/events/312650604

#dotnet #swiss #zurich #iam #identity #iam #mcp #oss #community

February DOTNET Zurich @isolutions, Thu, Feb 5, 2026, 6:00 PM | Meetup

**5th February - DotNet Zurich @ Isolutions** *Join us in person at Isolutions!!* This event will happen at Isolutions, The Circle. **Agenda:** * 17:45 Reception open &

Meetup

damienbod Jan 26

Blogged: Force step up authentication in web applications

https://damienbod.com/2026/01/26/force-step-up-authentication-in-web-applications/

#aspnetcore #dotnet #blazor #aspire #identity #oauth #oidc #duende #iam #swiyu #eid

Force step up authentication in web applications

The post shows how to implement a step up authorization using the OAuth 2.0 Step Up Authentication Challenge Protocol RFC 9470. The application uses ASP.NET Core to implement the API, the web appli…

Software Engineering

damienbod Jan 19

Blogged: Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende

https://damienbod.com/2026/01/18/implementing-level-of-identification-loi-with-asp-net-core-identity-and-duende/

#aspnetcore #oauth #openid #dotnet #oidc #iam #swiyu #aspire #oss #identity #eid #swiss #bit #gov #loi #loa #blazor #duende

Implementing Level of Identification (LoI) with ASP.NET Core Identity and Duende

This article explores how to implement Level of Identification (LOI) in an ASP.NET Core application. The solution uses Duende IdentityServer as the OpenID Connect provider and ASP.NET Core Identity…

Software Engineering

damienbod Jan 12

Blogged: Implementing Level of Authentication (LoA) with ASP.NET Core Identity and Duende

https://damienbod.com/2026/01/12/implementing-level-of-authentication-loa-with-asp-net-core-identity-and-duende/

#aspnetcore #dotnet #identity #duende #authentication #loa #passkeys #iam #acr #amr

Implementing Level of Authentication (LoA) with ASP.NET Core Identity and Duende

This post shows how to implement an application which requires a user to authenticate using passkeys. The identity provider returns three claims to prove the authentication level (loa), the identit…

Software Engineering

damienbod Jan 5

Cool live event on the 5th Feb 2026, .NET User Group Zürich

Talks:

- How to securely implement MCP with OAuth in .NET
- Swiss Identity in .NET: A Practical Guide to EIAM, aGov, SwissID, Entra ID—and Social Logins

@ isolutions offices: The Circle 388058 Zürich

https://www.meetup.com/dotnet-zurich/events/312650604

February DOTNET Zurich @isolutions, Thu, Feb 5, 2026, 6:00 PM | Meetup

**5th February - DotNet Zurich @ Isolutions** *Join us in person at Isolutions!!* This event will happen at Isolutions, The Circle. **Agenda:** * 17:45 Reception open &

Meetup

damienbod Jan 5

Blogged: Set the amr claim when using passkeys authentication in ASP.NET Core

https://damienbod.com/2026/01/05/set-the-amr-claim-when-using-passkeys-authentication-in-asp-net-core/

#oauth #openid #openidconnect #iam #security #aspnetcore #dotnet #passkeys #fido2 #mfa

Set the amr claim when using passkeys authentication in ASP.NET Core

The post shows how to set the correct amr value when authenticating using ASP.NET Core Identity and passkeys in .NET 10. When authenticating using OpenID Connect and passkeys authentication, the Op…

Software Engineering

damienbod Dec 20

Blogged: Digital Authentication and Identity validation

https://damienbod.com/2025/12/20/digital-authentication-and-identity-validation/

#oidc #identity #iam #swiyu #eid #oauth #dpop #openid #security #ecollecting #authentication #loa #loi #vc #oauth2 #swiss #ch #cybersecurity