- Loading...
Sponsored by Dometrain Courses—Get 30% off Dometrain Pro with code ANDREW30 and access the best courses for .NET Developers
My new book ASP.NET Core in Action, Third Edition is available now! It supports .NET 7.0, and is available as an eBook or paperback.
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core
Exploring the .NET 11 preview - Part 8
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package…
Understanding Device Bound Session Credentials (DBSC)
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works…
in Security
The pain of serializing unions and closed class hierarchies with System.Text.Json
Exploring the .NET 11 preview - Part 7
In this post I discuss the System.Text.Json support for unions and closed hierarchies coming in .NET 11, the decisions made, and some of the sharp edges I hit…
Finding the total number of processors on a machine with .NET
In this post I show how to find the total number of logical CPUs on a host (not just those available to a process); something that isn't exposed in modern .NET…
Automatic CSRF protection based on Fetch Metadata headers
Exploring the .NET 11 preview - Part 6
In this post I describe the new Cross-Site Request Forgery protection added to ASP.NET Core that uses Fetch Metadata HTTP headers instead of antiforgery tokens…
Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
In this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a request…
