Category
.NET / ASP.NET Core
4 posts
Phase 4: Building a Secure Next.js Identity Client
A Next.js and React client demonstrating OAuth, PKCE, JWT, and DPoP integration with the Secure Identity & Trusted Data API.
Phase 3: Securing OAuth Access Tokens with DPoP in ASP.NET Core
Phase 3 introduces DPoP sender-constrained access tokens to the Secure Identity & Trusted Data API, demonstrating ES256 proof-of-possession, JWT key binding, replay protection, OAuth scopes, and ASP.NET Core security architecture.
Phase 2: Building a Protected Identity & Trusted Data API with ASP.NET Core
Phase 2 extends the Secure Identity & Trusted Data API POC with a protected ASP.NET Core Resource Server, JWT/JWK validation, OAuth scopes, CQRS, Entity Framework Core, and PostgreSQL.
Phase 1: Building a Secure Identity Provider with ASP.NET Core, OAuth 2.1, PKCE, JWT & JWK
A self-contained identity integration POC built with ASP.NET Core and CQRS, demonstrating OAuth 2.1 Authorization Code flow, PKCE, JWT access tokens, RSA signing, and JWK-based public key discovery.