As we close 2025, we look back on an exceptional year marked by dedication, innovation, and an unwavering commitment to our community. What follows details the remarkable technical achievements of our engineering teams, who delivered over 1,042 merged pull requests in our core products repository and 173 in our FOSS projects. These numbers represent thousands of hours spent coding, reviewing, testing, and ultimately, shipping best-in-class security software.
Our engineers not only pushed the boundaries of our products—achieving major milestones like the FAPI 2.0 Profile Certification for IdentityServer 7.3.0, the architectural leap of Backend for Frontend (BFF) 4.0.0 GA with its multi-frontend support, and the complete internal reimagination of Duende.AccessTokenManagement 4.0.0—but also ensured we remained future-proof with immediate .NET 10 Support across our major releases.
However, a year of success is built on more than just code. This review celebrates the collective hard work of every Duende employee. Our Sales Teams worked tirelessly to bring our enterprise-grade security solutions to new markets and clients. Our Marketing Team ensured that the value of our commitment to standards and developer experience resonated clearly, amplifying our message of security and compliance to a global audience. And, critically, our Customer Success Team was on the front lines, translating complex technical challenges into real-world solutions, fostering the strong trust our clients place in us.
Together, these efforts have resulted in a powerful, positive impact on both the Duende customer base and the broader .NET community.
First, a huge thank you to our community contributors, including @SimonCropp, @wcabus, @0xced, @stefannikolei, @AndersAbel, @gao-artur, @buehler, @Tornhoof, and many others who submitted pull requests, reported issues, and participated in discussions!
Note: There have been over 1,042 pull requests for the 2024-2025 period.
This was a significant release featuring:
A significant architectural evolution:
IConfiguration for dynamic scenarios Building on the success of 7.3.0:
ui_locales parameter Templates 1.1.0 - New unified template package:
duende-is template with improved admin UI and wizards duende-bff-remoteapi, duende-bff-localapi, duende-bff-blazor) Developer Productivity:
Note: 173 total merged pull requests for 2024-2025. View all results in GitHub.
A complete internal reimagination:
ITokenRequestCustomizer interface for context-based scoping private_key_jwt IDPoPProofTokenFactory interface for complete customization IDistributedCache with modern HybridCache Token Management Evolution:
Performance & Quality:
DateTimeExtensions and Base64Url in favor of runtime-provided types. With FAPI 2.0 certification and support for the latest security standards (RFC 9701, RFC 8414, RFC 7523), Duende IdentityServer remains at the forefront of OAuth 2.0 and OpenID Connect security. Your applications benefit from enterprise-grade security that meets the most stringent regulatory requirements.
Since we’re heading into the new year, now is also a great time to learn more about security through the library of content produced by Duende (docs, blog and YouTube) and by joining our technical discussions on GitHub.
The new templates, Aspire integration, and diagnostic tooling make it easier than ever to get started and troubleshoot issues. The multi-frontend BFF support opens up exciting new architectural possibilities for complex applications that leverage SPA frameworks, such as Angular, React, and Vuejs.
HybridCache, OpenTelemetry integration, and improved caching strategies enable your applications to run faster and provide better visibility into what's happening under the hood.
With .NET 10 support already in release candidates, Duende is staying ahead of the curve, ensuring you can adopt the latest .NET features as soon as they're available. We’ve detailed some of the most anticipated and impactful .NET 10 enhancements for our community, including: passkeys, metrics, cookie handler changes, and certificate improvements. Additionally, see our Passkey posts in our .NET 10 series to ensure you’re considering the best possible security for your organization:
Friendly reminder, upgrading to .NET 10 and IdentityServer 7.4 provides three years of guaranteed support and security patching from Duende and Microsoft.
I’m immensely proud of what we’ve done this year. Not only has Duende delivered significant value to customers, but I think we’re also well prepared for your year ahead in 2026. Being a part of the .NET community for my entire career, I’m keenly aware that with the .NET 10 LTS release many development teams are planning significant modernization efforts in the months ahead. You may be in one of those teams, and we know how arduous and daunting it may be.
We’re thinking of you and how best you might deliver value to your user base. We’ve written about why now is a great time to add “improving our security posture” to the backlog. But the tl;dr is that by upgrading to the latest version of Duende products, you position your development team to capitalize on new opportunities and remain competitive in the software solutions space.
All in all, it’s a bright future for Duende customers. We wish you the best in the new year.
Ready to upgrade? Check out our documentation for migration guides and get started with the most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core! 🚀
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。