Identityserver Api Protection
by DuendeSoftwarefb32edc51982No license9 starsListed Oct 8, 2026Updated Oct 8, 2026Repository updated 4 weeks ago
Protecting APIs with Duende IdentityServer: JWT bearer authentication, reference token introspection, scope-based authorization, DPoP/mTLS proof-of-possession validation, local API authentication, and multi-audience scenarios.
- fb32edc51982Currentcommit fb32edcPublished Oct 8, 2026
Source and attribution
Source:DuendeSoftware/duende-skillsinskills/identityserver-api-protectionat commitfb32edc
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
More from DuendeSoftware/duende-skills
Token Management
DuendeSoftware
Guides .NET developers through Duende.AccessTokenManagement patterns for caching, refreshing and attaching OAuth tokens.
Oauth Oidc Protocols
DuendeSoftware
Explains OAuth 2.0 and OpenID Connect protocol fundamentals, flows, tokens, discovery, and troubleshooting.
Identityserver4 Migration
DuendeSoftware
Guides migration of an ASP.NET Core identity server from IdentityServer4 v3/v4 to Duende IdentityServer v8.
Identityserver Usermanagement
DuendeSoftware
Guides setup of Duende User Management with IdentityServer, covering passwordless auth, storage, user lifecycle, and migration.
Identityserver Upgrade V7 To V8
DuendeSoftware
Guides upgrading Duende IdentityServer from v7.4 to v8.0, covering breaking API changes, EF migrations and licensing.
Identityserver Ui Flows
DuendeSoftware
Guides building Duende IdentityServer UI pages: login, logout, consent, error, and federation gateway flows.
More in Software Development
Playground
anthropics
Builds self-contained interactive HTML playgrounds with controls, live preview, and copyable prompt output.
M5 Onboard
anthropics
Provisions M5Stack ESP32 boards by detecting them on USB, flashing UIFlow 2.0 firmware, and installing a MicroPython app bundle.
Cardputer Buddy
anthropics
Guides iterating on a Cardputer-Adv MicroPython app bundle: adding apps, pushing files over USB-serial, tailing logs, and running REPL commands.
Dpop Adoption
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Gemini Live Api
Generates a Gemini Live API WebSocket client class, tests, docs, and a demo UI for bidirectional streaming.
Gemini Api
Guides use of the Gemini API on Google's Agent Platform with the Gen AI SDK across languages and capabilities.