A flexible, standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core enabling secure authentication and API access control.
The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core
This tool is primarily used by developers building modern ASP.NET Core applications that require robust authentication and authorization mechanisms based on OpenID Connect and OAuth 2.0 standards. It is ideal for securing APIs and implementing identity management solutions in web and API projects.
Users must comply with Duende Software's licensing terms to use the products. The framework is designed for ASP.NET Core applications and requires familiarity with OAuth 2.0 and OpenID Connect standards. Leveraging the BFF pattern enhances security for browser-based JavaScript applications by keeping tokens server-side and avoiding CORS complexities.
Add Duende.IdentityServer package via NuGet for core IdentityServer functionality
Add Duende.BFF package via NuGet to implement Backend for Frontend pattern
Add Duende.AspNetCore.Authentication.JwtBearer package via NuGet to extend JWT Bearer authentication with DPoP support
Refer to official documentation for detailed setup and configuration instructions