Tore Nestenius | MVP

Do you know what happens between your prompt and ClaudeCode?

I didn’t. So I built it.

Coding Agent Explorer (.NET). A reverse proxy + live dashboard showing every LLM call, tool use, and token flow in real time.

nestenius.se/ai/introduci...

#claudecode #CodingAgents @anthropic.com #agentic

New blog post: Duende IdentityServer 7.4.4 from scratch in ASP.NET Core 10

Duende IdentityServer 7.4.4 from scratch in ASP.NET Core 10

Templates are great until something breaks. I built IdentityServer from an empty project, explaining every piece along the way.

Covers Setup, UI, Logging, and more.

nestenius.se/net/duende-i...

@aspnetcore.news @duendesoftware.com

Duende BFFv4 is now available Duende BFFv4 is now available! Learn about multi-frontend, simplified security, and unlock end-to-end visibility with OpenTelemetry.

Duende BFF v4 is available! Architecturally, this is huge: you can now support multiple frontends from a single, robust backend. Plus, we've integrated OpenTelemetry for seamless end-to-end observability in your identity flow.

Simplify your stack: duendesoftware.com/blog/2025120...

BFF in ASP.NET Core #7 - Introducing the Duende BFF Library Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.

🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news

BFF in ASP.NET Core #7 - Introducing the Duende BFF Library Learn how to migrate from custom Backend-for-Frontend implementation to Duende BFF library in ASP.NET Core. Complete tutorial with CSRF protection, OAuth 2.0, and API security.

🎯 BFF Series FINALE!

Part 7: Replace 200+ lines of custom code with Duende BFF Library in minutes.

Series complete - from tokens in browsers to bulletproof SPA security!

Thanks @duendesoftware.com

nestenius.se/net/bff-in-a...

#aspnetcore #oidc #dotnet #mvpbuzz @aspnetcore.news

BFF in ASP.NET Core #6 - Securing our BFF with CORS Learn how to secure your ASP.NET Core Backend-for-Frontend (BFF) with robust CORS protection. Prevent cross-origin attacks, implement preflight requests, and add custom middleware for enhanced securit...

BFF Series #6 is live: Securing Your BFF with CORS

Just published my guide to implementing production-ready CORS policies for BFF architectures.

✅ Why "AllowAnyOrigin" is dangerous
✅ Strict origin configuration
✅ ASP.NET Core examples

nestenius.se/net/bff-in-a...

#aspnetcore #cors #dotnet #oidc

🔄 BFF Pattern Series Part 5: Automatic Token Renewal

Learn how to implement seamless token renewal in ASP.NET Core that your users will never notice.

nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #bff #oauth #oidc #mvpbuzz

🛠️ BFF Pattern Series #4: Building Your First BFF from Scratch

Theory → Practice. Part 4 is live!

✅ ASPNET Core
✅ Real OpenID Connect integration
✅ Secure API proxying
✅ Zero tokens in the browser

🔗 nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #oidc #mvpbuzz

BFF Pattern Series #3 is live!

You moved tokens out of the browser, but is your
session cookie actually secure?

Learn how to properly protect cookies with:
✅ HttpOnly
✅ SameSite
✅ __Host- prefixes
and more...

nestenius.se/net/bff-in-a...

#aspnetcore #bff #dotnet #mvpbuzz

🔐 BFF Pattern Series Part 2 is live!

Learn why storing tokens in browsers is no longer acceptable and how the BFF pattern became the gold standard for SPA security.

Your SPA handles UI. Your BFF handles security!

👉 nestenius.se/net/bff-in-a...

#aspnetcore #dotnet #security #bff

🚀 New series: Securing SPAs with the BFF Pattern
Stop storing tokens in the browser!

My new blog series shows how to eliminate XSS risks using Backend-for-Frontend in asp.net Core.

Part 1: nestenius.se/net/implemen...

#aspnetcore #dothet #security #mvpbuzz

How to use KurrentDB for Event Sourcing in C# on Azure?

🚀 Deploy it with PowerShell
⚙️ Connect from .NET
📦 Write and read events
🔍 Inspect with Kurrent Navigator

Full guide 👉 nestenius.se/net/how-to-u...

@kurrent-io.bsky.social
#KurrentDB #EventSourcing #CQRS #dotnet #DDD #Azure #mvpbuzz

Thanks! Glad you liked it! Wasted soo many hours trying to find the root cause for this🙁

Configuring ASP .NET Core Forwarded Headers Middleware by @tndata.bsky.social nestenius.se/net/configur... #aspnetcore

𝐍𝐞𝐰 𝐛𝐥𝐨𝐠 𝐩𝐨𝐬𝐭: 𝐂𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

New blog post 📝

Running ASP.NET Core behind a proxy?
Then you need to configure ForwardedHeadersMiddleware the right way.

✅ Trust proxy IPs
✅ Handle X-Forwarded-* headers
✅ Avoid broken IPs, schemes & hosts

Read it 👉 nestenius.se/net/configur...
#aspnetcore #proxy #mvpbuzz

🚀 .NET 10 Preview 1 is here! 🎉

The next LTS release brings:
✅ Faster JIT & AVX 10.2 support
✅ Blazor & Minimal API improvements
✅ New C# 14 features
✅ EF Core & .NET MAUI updates

Check out what’s new! 🔗👇
🔗 learn.microsoft.com/en-gb/dotnet...

#dotnet #aspnetcore

Are you ready? 🏃‍♀️🏃‍♂️
The Call for Papers for #Oredev2025 opens in just a few days!

More info on how to prepare on our website! 👉 oredev.org/callforpaper

Exploring the Forwarded Headers Middleware in ASP .NET Core by @tndata.bsky.social https://buff.ly/3EbJB8v #aspnetcore

Exploring the Forwarded Headers Middleware in ASP.NET Core

🚀 New blog post: 𝐄𝐱𝐩𝐥𝐨𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐅𝐨𝐫𝐰𝐚𝐫𝐝𝐞𝐝 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐌𝐢𝐝𝐝𝐥𝐞𝐰𝐚𝐫𝐞 𝐢𝐧 𝐀𝐒𝐏.𝐍𝐄𝐓 𝐂𝐨𝐫𝐞

Lost client IPs? Incorrect URLs? Proxies like load balancers or TLS terminators causing trouble?

nestenius.se/hardware/exp...

#ASPNetCore #Proxy #dotnet

Excited to hear @madskristensen.net’s keynote at #TechPassionDay in Copenhagen! Learning about Building Lovable Software for Millions of Users—can’t wait! #Innovation #SoftwareDevelopment

AdditionalAuthorizationParameters in ASP .NET Core 9 by @tndata.bsky.social https://buff.ly/40l1YjT #aspnetcore

.NET Aspire Quick Tip - Managing Container & Data Lifetime - .NET Blog .NET Aspire 9 adds new control over the lifetime of containers on your local developer environment. Let's look at how to manage them with the new APIs!

.NET Aspire Quick Tip – Managing Container & Data Lifetime

AdditionalAuthorizationParameters in ASP.NET Core 9

Simplify OpenID-Connect in ASP.NET Core 9 with 𝐀𝐝𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐏𝐚𝐫𝐚𝐦𝐞𝐭𝐞𝐫𝐬! 🎉

No more clunky workarounds—easily customize & maintain authentication flows.

Learn more here: nestenius.se/net/addition...

#dotnet #OIDC #Authentication #aspnetcore

Thanks! Looking forward to explore all the fun and interesting opportunities 😀

Thanks!😀

Thanks 😀

Thanks Anders!

Thanks! :-)

What a great way to start the new year!

I’m thrilled to share that I’ve received my first Microsoft MVP Award in .NET.

Huge thanks to everyone who supported me!

I can’t wait to continue exchanging ideas with all of you!
@mvpaward.bsky.social

#dotnet #MVPBuzz

🚀 Wrapping up my @duendesoftware.com IdentityServer + Docker series!

🔑 Fixing sign-out
🔑 Using ID tokens for safe session handling
🔑 The id_token_hint

nestenius.se/net/identity...

#IdentityServer #Authentication #ASPNetCore #dotnet