Take advantage of user secrets management in ASP.NET Core to prevent the sharing of sensitive application data in your projects When working with ASP.NET web applications, you will want to protect ...

User context makes life easier when tracing Http requests in ASP.NET Core applications. It’s easy to add with custom middleware. When working with web applications, you will often want to keep watch ...

When you need to integrate authorization with procedural code, you're going to need your application's ClaimsPrincipal object so that you can check the user's authorization claims. Here's both how to ...

I've done a couple of recent columns about securing Blazor Components and using claims-based policies declaratively in ASP.NET Core generally. While working with security, I'm always interested in ...

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...