Tore Nestenius | MVP
tndata.bsky.social
Tore Nestenius | MVP
@tndata.bsky.social
.NET, Azure Cloud, and security trainer and consultant. Microsoft .NET MVP
🔄 BFF Pattern Series Part 5: Automatic Token Renewal

Learn how to implement seamless token renewal in ASP.NET Core that your users will never notice.

nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #bff #oauth #oidc #mvpbuzz
August 6, 2025 at 1:46 PM
🛠️ BFF Pattern Series #4: Building Your First BFF from Scratch

Theory → Practice. Part 4 is live!

✅ ASPNET Core
✅ Real OpenID Connect integration
✅ Secure API proxying
✅ Zero tokens in the browser

🔗 nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #oidc #mvpbuzz
July 30, 2025 at 7:14 AM
BFF Pattern Series #3 is live!

You moved tokens out of the browser, but is your
session cookie actually secure?

Learn how to properly protect cookies with:
✅ HttpOnly
✅ SameSite
✅ __Host- prefixes
and more...

nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #mvpbuzz
July 23, 2025 at 8:10 AM
🔐 BFF Pattern Series Part 2 is live!

Learn why storing tokens in browsers is no longer acceptable and how the BFF pattern became the gold standard for SPA security.

Your SPA handles UI. Your BFF handles security!

👉 nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #security #bff
July 17, 2025 at 1:26 PM
🚀 New series: Securing SPAs with the BFF Pattern
Stop storing tokens in the browser!

My new blog series shows how to eliminate XSS risks using Backend-for-Frontend in asp.net Core.

Part 1: nestenius.se/net/implemen...

#aspnetcore #dothet #security #mvpbuzz
July 11, 2025 at 8:24 AM
New blog post 📝

Running ASP.NET Core behind a proxy?
Then you need to configure ForwardedHeadersMiddleware the right way.

✅ Trust proxy IPs
✅ Handle X-Forwarded-* headers
✅ Avoid broken IPs, schemes & hosts

Read it 👉 nestenius.se/net/configur...
#aspnetcore #proxy #mvpbuzz
April 10, 2025 at 9:17 AM
🚀 .NET 10 Preview 1 is here! 🎉

The next LTS release brings:
✅ Faster JIT & AVX 10.2 support
✅ Blazor & Minimal API improvements
✅ New C# 14 features
✅ EF Core & .NET MAUI updates

Check out what’s new! 🔗👇
🔗 learn.microsoft.com/en-gb/dotnet...

#dotnet #aspnetcore
February 25, 2025 at 9:30 PM
🚀 New blog post: 𝐄𝐱𝐩𝐥𝐨𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

Lost client IPs? Incorrect URLs? Proxies like load balancers or TLS terminators causing trouble?

nestenius.se/hardware/exp...

#ASPNetCore #Proxy #dotnet
January 23, 2025 at 10:27 AM
Excited to hear @madskristensen.net’s keynote at #TechPassionDay in Copenhagen! Learning about Building Lovable Software for Millions of Users—can’t wait! #Innovation #SoftwareDevelopment
January 22, 2025 at 8:35 AM
Simplify OpenID-Connect in ASP.NET Core 9 with 𝐀𝐝𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐏𝐚𝐫𝐚𝐦𝐞𝐭𝐞𝐫𝐬! 🎉

No more clunky workarounds—easily customize & maintain authentication flows.

Learn more here: nestenius.se/net/addition...

#dotnet #OIDC #Authentication #aspnetcore
January 7, 2025 at 2:42 PM
What a great way to start the new year!

I’m thrilled to share that I’ve received my first Microsoft MVP Award in .NET.

Huge thanks to everyone who supported me!

I can’t wait to continue exchanging ideas with all of you!
@mvpaward.bsky.social

#dotnet #MVPBuzz
January 1, 2025 at 3:06 PM
🚀 Wrapping up my @duendesoftware.com IdentityServer + Docker series!

🔑 Fixing sign-out
🔑 Using ID tokens for safe session handling
🔑 The id_token_hint

nestenius.se/net/identity...

#IdentityServer #Authentication #ASPNetCore #dotnet
December 16, 2024 at 8:50 AM
🔒 Secure your IdentityServer with HTTPS in Docker Compose! 🚀

In part 3 of my series, I show you how to:
✅ Fix cookie restrictions blocking auth
✅ Use self-signed certs for HTTPS
✅ Configure HTTPS in Kestrel

👉 nestenius.se/net/identity...

#IdentityServer #dotnet #ASPNetCore @duendesoftware.com
December 9, 2024 at 10:55 AM
Struggling to containerize Duende IdentityServer with Docker? 🚢

I’ve written a step-by-step guide to:
✅ Set up IdentityServer in containers
✅ Solve localhost issues
✅ Code examples

🔗 nestenius.se/net/identity...

@duendesoftware.com #identityserver #oidc #dotnet #aspnetcore
November 25, 2024 at 9:29 AM