Skip to main content
net8.0net9.0

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

Published
Oct 31, 2024
1y ago
Total Downloads
28.2M
28,193,278

Deprecated Package Version

Reason: CriticalBugs

https://github.com/DuendeSoftware/products/security/advisories/GHSA-mxv6-xwqj-ww2p

Install

dotnet add package Duende.IdentityServer --version 7.1.0-preview.1
ProductVersions
.NET
net8.0net9.0

README

Duende.IdentityServer

The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core.

Overview

Duende IdentityServer is a highly extensible, standards-compliant framework for implementing the OpenID Connect and OAuth 2.x protocols in ASP.NET Core. It offers deep flexibility for handling authentication, authorization, and token issuance and can be adapted to fit complex custom security scenarios.

Getting Started

If you're ready to dive into development, check out our Quickstart Tutorial Series for step-by-step guidance.

For more in-depth documentation, visit our documentation portal.

Licensing

Duende IdentityServer is source-available, but requires a paid license for production use.

  • Development and Testing: You are free to use and explore the code for development, testing, or personal projects without a license.
  • Production: A license is required for production environments.
  • Free Community Edition: A free Community Edition license is available for qualifying companies and non-profit organizations. Learn more here.

Reporting Issues and Getting Support

Related Packages

Changes from Previous Version

v7.0.10v7.1.0-preview.1
Added Frameworks
net9.0
Deprecated
This version was marked as deprecated.

Adoption Assessment

Organizations that require a self-operated identity provider with custom protocol and consent flows.

Security Guide
This version is marked prerelease. Validate its API and upgrade path before production use.NuGet marks this package as deprecated. Review the publisher's migration guidance before adopting it.No SPDX license expression is published. Review the license text and your organisation's policy before redistribution.Compatibility metadata lists 2 target frameworks; confirm the exact target used by your application.
Editorial Note: OpenID Connect and OAuth 2.0 server framework for issuing tokens and centralizing identity workflows. Trade-off: Commercial licensing and operational identity expertise are required for long-term ownership.

Related Guides & Workflows

Learn how to evaluate, integrate, or audit this package in your .NET project.