My first video course is live: Getting Started with Authentication and Authorization in .NET Started as a 5–6h idea… turned into a 12+ hour deep dive into how auth really works in ASP.NET Core. Not just wiring things up, but understanding the internals.

My first video course is live:

Getting Started with Authentication & Authorization in .NET

Turned into a 12+ hour deep dive into how auth works in ASP.NET Core.

Not just wiring things up, but understanding the internals!

dometrain.com/course/getti...

#dotnet #aspnetcore #dometrain #mvpbuzz

Thanks! Glad you liked it!

Visualizing Claude Code MCP Requests with Coding Agent Explorer

When Claude Code talks to an MCP server, what is it actually saying?

Until now, that conversation was invisible.

New post: Visualizing Claude Code MCP Requests with the Coding Agent Explorer (.NET)

nestenius.se/ai/visualizi...

#ClaudeCode #MCP #mvpbuzz #dotnet @aspnetcore.news

After my last post, people asked:

What is Claude Code actually doing?

Part 2 is out: Claude Code Hooks 🔍

Intercept file access, commands, permissions, and tool usage.
Enforce rules. Block secrets. See everything.

nestenius.se/ai/exploring...
@aspnetcore.news @anthropic.com #claudecode #mvpbuzz

Do you know what happens between your prompt and ClaudeCode?

I didn’t. So I built it.

Coding Agent Explorer (.NET). A reverse proxy + live dashboard showing every LLM call, tool use, and token flow in real time.

nestenius.se/ai/introduci...

#claudecode #CodingAgents @anthropic.com #agentic

New blog post: Duende IdentityServer 7.4.4 from scratch in ASP.NET Core 10

Duende IdentityServer 7.4.4 from scratch in ASP.NET Core 10

Templates are great until something breaks. I built IdentityServer from an empty project, explaining every piece along the way.

Covers Setup, UI, Logging, and more.

nestenius.se/net/duende-i...

@aspnetcore.news @duendesoftware.com

Duende BFFv4 is now available Duende BFFv4 is now available! Learn about multi-frontend, simplified security, and unlock end-to-end visibility with OpenTelemetry.

Duende BFF v4 is available! Architecturally, this is huge: you can now support multiple frontends from a single, robust backend. Plus, we've integrated OpenTelemetry for seamless end-to-end observability in your identity flow.

Simplify your stack: duendesoftware.com/blog/2025120...

BFF in ASP.NET Core #7 - Introducing the Duende BFF Library Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.

🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news

BFF in ASP.NET Core #7 - Introducing the Duende BFF Library Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.

🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news

BFF in ASP.NET Core #6 - Securing our BFF with CORS Learn how to secure your ASP.NET Core Backend-for-Frontend (BFF) with robust CORS protection. Prevent cross-origin attacks, implement preflight requests, and add custom middleware for enhanced securit...

BFF Series #6 is live: Securing Your BFF with CORS

Just published my guide to implementing production-ready CORS policies for BFF architectures.

✅ Why "AllowAnyOrigin" is dangerous
✅ Strict origin configuration
✅ ASP.NET Core examples

nestenius.se/net/bff-in-a...

#aspnetcore #cors #dotnet #oidc

🔄 BFF Pattern Series Part 5: Automatic Token Renewal

Learn how to implement seamless token renewal in ASP.NET Core that your users will never notice.

nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #bff #oauth #oidc #mvpbuzz

🛠️ BFF Pattern Series #4: Building Your First BFF from Scratch

Theory → Practice. Part 4 is live!

✅ ASPNET Core
✅ Real OpenID Connect integration
✅ Secure API proxying
✅ Zero tokens in the browser

🔗 nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #oidc #mvpbuzz

BFF Pattern Series #3 is live!

You moved tokens out of the browser, but is your
session cookie actually secure?

Learn how to properly protect cookies with:
✅ HttpOnly
✅ SameSite
✅ __Host- prefixes
and more...

nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #mvpbuzz

🔐 BFF Pattern Series Part 2 is live!

Learn why storing tokens in browsers is no longer acceptable and how the BFF pattern became the gold standard for SPA security.

Your SPA handles UI. Your BFF handles security!

👉 nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #security #bff

🚀 New series: Securing SPAs with the BFF Pattern
Stop storing tokens in the browser!

My new blog series shows how to eliminate XSS risks using Backend-for-Frontend in asp.net Core.

Part 1: nestenius.se/net/implemen...

#aspnetcore #dothet #security #mvpbuzz

How to use KurrentDB for Event Sourcing in C# on Azure?

🚀 Deploy it with PowerShell
⚙️ Connect from .NET
📦 Write and read events
🔍 Inspect with Kurrent Navigator

Full guide 👉 nestenius.se/net/how-to-u...

@kurrent-io.bsky.social
#KurrentDB #EventSourcing #CQRS #dotnet #DDD #Azure #mvpbuzz

Thanks! Glad you liked it! Wasted soo many hours trying to find the root cause for this🙁

Configuring ASP .NET Core Forwarded Headers Middleware by @tndata.bsky.social nestenius.se/net/configur... #aspnetcore

𝐍𝐞𝐰 𝐛𝐥𝐨𝐠 𝐩𝐨𝐬𝐭: 𝐂𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

New blog post 📝

Running ASP.NET Core behind a proxy?
Then you need to configure ForwardedHeadersMiddleware the right way.

✅ Trust proxy IPs
✅ Handle X-Forwarded-* headers
✅ Avoid broken IPs, schemes & hosts

Read it 👉 nestenius.se/net/configur...
#aspnetcore #proxy #mvpbuzz

🚀 .NET 10 Preview 1 is here! 🎉

The next LTS release brings:
✅ Faster JIT & AVX 10.2 support
✅ Blazor & Minimal API improvements
✅ New C# 14 features
✅ EF Core & .NET MAUI updates

Check out what’s new! 🔗👇
🔗 learn.microsoft.com/en-gb/dotnet...

#dotnet #aspnetcore

Are you ready? 🏃‍♀️🏃‍♂️
The Call for Papers for #Oredev2025 opens in just a few days!

More info on how to prepare on our website! 👉 oredev.org/callforpaper

Exploring the Forwarded Headers Middleware in ASP .NET Core by @tndata.bsky.social https://buff.ly/3EbJB8v #aspnetcore

Exploring the Forwarded Headers Middleware in ASP.NET Core

🚀 New blog post: 𝐄𝐱𝐩𝐥𝐨𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

Lost client IPs? Incorrect URLs? Proxies like load balancers or TLS terminators causing trouble?

nestenius.se/hardware/exp...

#ASPNetCore #Proxy #dotnet

Excited to hear @madskristensen.net’s keynote at #TechPassionDay in Copenhagen! Learning about Building Lovable Software for Millions of Users—can’t wait! #Innovation #SoftwareDevelopment

AdditionalAuthorizationParameters in ASP .NET Core 9 by @tndata.bsky.social https://buff.ly/40l1YjT #aspnetcore

.NET Aspire Quick Tip - Managing Container & Data Lifetime - .NET Blog .NET Aspire 9 adds new control over the lifetime of containers on your local developer environment. Let's look at how to manage them with the new APIs!

.NET Aspire Quick Tip – Managing Container & Data Lifetime

AdditionalAuthorizationParameters in ASP.NET Core 9

Simplify OpenID-Connect in ASP.NET Core 9 with 𝐀𝐝𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐏𝐚𝐫𝐚𝐦𝐞𝐭𝐞𝐫𝐬! 🎉

No more clunky workarounds—easily customize & maintain authentication flows.

Learn more here: nestenius.se/net/addition...

#dotnet #OIDC #Authentication #aspnetcore

Thanks! Looking forward to explore all the fun and interesting opportunities 😀

Thanks!😀

Thanks 😀