๐ ๏ธ .NET Devs: The MCP RC brings a great DCR update! SEP-837 advises declaring OIDC application_type to validate redirect URIs with precision (e.g., enforcing HTTPS for web).
Grab the C# code to implement this easily in our newest post: duendesoftware.com/blog/20260730-โฆ
Duende Software. Makers of Duende IdentityServer and the BFF security framework. youtube.com/@duendesoftware
Joined September 2020
- A practical guide to choosing session and token lifetimes in Duende IdentityServer. Learn how to align your security configuration with your specific risk profile. duende.link/87qkhaq #dotnet
- Adopting new AI protocols? For Duende IdentityServer users, the new MCP RC is smooth sailing. ๐ The heavy lifting for the 6 new OAuth security SEPs is largely built-in. We recommend just one quick C# tweak for DCR. See how to get MCP-ready:
- Want to ensure your web app is always served over HTTPS? ๐ In our latest episode, we look at enforcing transport security to secure your traffic in ASP.NET Core using UseHttpsRedirection() and the more robust UseHsts(). Watch here: youtu.be/oIwdoscInWw

