IdentityServer Reviews and details

Social recommendations and mentions

• Identity server 4

  Its deprecated in favor of Duende Identityserver which introduced a license model. Source: 5 months ago

• How does cookie based authentication work?

  Tokens usually have a lifetime and they are separate from the user's authentication principals like username and password. Unless you are rolling your own form of token provider (not something that would be recommended) the token creation is handled for you. Take a look at https://identityserver4.readthedocs.io/en/latest/ or if your organization makes under 1M in income a year the free version of what Identity... Source: over 1 year ago

• ImageSharp leaving the .NET Foundation due to licensing change

  I think Duende (Identity Server) handled the situation pretty well. https://duendesoftware.com/products/identityserver > Standard License Pricing. - Source: Hacker News / over 1 year ago

• Why is authentication such a sh*t show with .NET 6?

  He's referring to IdentityServer 3/4, which was open sourced, and was not owned by Microsoft. That 3rd party is commercializing their work (and to be fair, it's a lot of work) as https://duendesoftware.com/products/identityserver , and has a different commercial licensing model. Source: almost 2 years ago

• Show HN: Open-Source Identity Server Written in Go (Ory Kratos)

  I think "Identity Provider" is more correct, no? "IdentityServer" is the name of a specific IdP implemented in .NET (formerly OSS as https://identityserver4.readthedocs.io/en/latest, and now as a more commercial form as Duende IdentityServer: https://duendesoftware.com/products/identityserver). - Source: Hacker News / almost 2 years ago

• Creating JWT token auth yourself - is it secure?

  I would not recommend it. There is a server named Duende identity server which you can host locally. Source: over 2 years ago

• API Framework, the moving parts

  The biggest problem here is that there is no real open source solution that could provide this features. Microsoft does not provide something good. There is ASP.Net Identity with no support for OAuth and multi tenancy. So I guess I will go for Duende Identity Server. It's not really free, but open source projects und small companies will not have to pay for it. It is really sad that there is no really open source... - Source: dev.to / over 2 years ago