Skip to main content
net10.0

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

Published
Mar 2, 2026
7mo ago
Total Downloads
28.2M
28,193,278

Deprecated Package Version

Reason: CriticalBugs

https://github.com/DuendeSoftware/products/security/advisories/GHSA-mxv6-xwqj-ww2p

Install

dotnet add package Duende.IdentityServer --version 8.0.0-alpha.1
ProductVersions
.NET
net10.0

README

Changes from Previous Version

v7.4.14v8.0.0-alpha.1
Removed Frameworks
net8.0net9.0
Deprecated
This version was marked as deprecated.

Adoption Assessment

Organizations that require a self-operated identity provider with custom protocol and consent flows.

Security Guide
This version is marked prerelease. Validate its API and upgrade path before production use.NuGet marks this package as deprecated. Review the publisher's migration guidance before adopting it.No SPDX license expression is published. Review the license text and your organisation's policy before redistribution.Compatibility metadata lists 1 target framework; confirm the exact target used by your application.
Editorial Note: OpenID Connect and OAuth 2.0 server framework for issuing tokens and centralizing identity workflows. Trade-off: Commercial licensing and operational identity expertise are required for long-term ownership.

Related Guides & Workflows

Learn how to evaluate, integrate, or audit this package in your .NET project.