What is Cipher Suites?
When a client makes a web or API request to a server, modern security standards require the use of TLS (Transport Layer Security) — a cryptographic protocol that provides confidentiality, integrity, a
Curiosity Space
Latest articles
Creating an Authorization Server using OpenIdDict library
My team was recently tasked with creating an authorization server that supports OAuth2 and OIDC standards. While this has been done many times before from scratch by various people, the idea of building everything from scratch—such as the database, v...
Create custom JWT Token assertion in KeyCloak
We all know Keycloak can easily generate a JWT token and include specific claim values. These values can be either hardcoded or taken from the identity account. For those who are not aware, a JWT token claim is information asserted about a subject an...
Introduction to KeyCloak's OAuth 2.0 functionalities.
In my previous article, we talked about how we can utilize KeyCloak as an IAM solution to protect our API endpoints. In this blog, we will explore some of the fundamental functionalities of KeyCloak such as: Client Credential Grant Password Grant ...
Secure .NET Core API with KeyCloak.
In my previous blogs which I talked about setup .NET Aspire, we set up a solution consisting of a UI project and a back-end API project. However, the endpoints in the API project did not have any authorization or authentication mechanisms, which is n...
Introduction to .NET Aspire.
Microsoft just introduced .NET Aspire as part of .NET 8. It was released for general availability in May 2024. According to Microsoft, .NET Aspire is an opinionated, cloud ready stack for building observable, production ready, distributed application...
Strategy Pattern via Dependency Injection.
In my last article, I discussed how to implement a Strategy Pattern to calculate the rental pricing for different book types using the Func Delegate feature. In this article, I will demonstrate how to achieve the same functionality by replacing the F...