A beginners guide to IdentityServer and OpenID Connect, starting with an empty project and ending with a near production ready environment.| Scott Brady
A deep dive into OpenID Connect’s ID token, looking at what identity tokens are, what they are not, where to use them, and how to validate them.| Scott Brady
Learn how OAuth Proof-Key for Code Exchange (PKCE) does not replace client authentication (e.g. secrets) and why you should use both where possible.| Scott Brady
Give your ASP.NET 4.x apps a refresh with the latest OWIN updates and Proof Key for Code Exchange| Scott Brady
How to encrypt identity tokens in IdentityServer4 and decrypt them in ASP.NET Core.| Scott Brady