Today Archive Tags AI AI news Contact
Categories
C# ASP.NET Core Data Aspire Blazor Runtime Security AI Azure Tools Messaging .NET MAUI Unity WPF
Sign in
Sources

BW Bart Wullems (The Art of Simplicity)
Blog

2stories
Oct 21latest
Visit site RSS
ASP.NET Core
Keep the cookie small
BWBart Wullems (The Art of Simplicity) Bart Wullems Oct 21

Shrinking the ASP.NET Core auth cookie with ITicketStore

Cookie authentication in ASP.NET Core serializes the whole AuthenticationTicket into the cookie, so large claim sets can push it past WAF limits. Implementing ITicketStore keeps the ticket on the server and leaves only a session key in the cookie. The article compares an in-memory store with a distributed cache version and discusses the scaling and revocation trade-offs.

aspnetcore authentication security 4 min
ADFS + OIDC
Extra claims from ADFS
BWBart Wullems (The Art of Simplicity) Bart Wullems Oct 19

Using the ADFS userinfo endpoint instead of allatclaims

This post shows how to keep the ADFS ID token small and fetch extra claims from the OpenID Connect userinfo endpoint instead of using allatclaims. It covers the urn:microsoft:userinfo claim rules and the ASP.NET Core OpenIdConnect setting that merges those claims. It also flags the audience error that appears when the wrong token is sent.

aspnetcore authentication security 3 min

Feedback

Found a bug or have an idea? Your message lands straight in my inbox.

Type of message