SqlOS 11.3.0: confirmed identity deletion
Delete accounts and organizations with session revocation and transactional host policy.
AuthServerSqlOSSecurityDashboard
Read the postBlog
Blog
Auth, hierarchical authorization, EF Core, and practical .NET application security — release by release.
SqlOS 11.1.1: Reliable concurrent email signup
Concurrent submissions of the same valid signup code now produce one account and a normal rejection for the other requests.
AuthServerSqlOS
Read the postSqlOS 11.1.0: A signed-in browser approves the device
Headless device approval uses the issuer session already in the browser, and the sign-in edges around email codes, stored secrets, and SAML posts fail closed.
AuthServerOAuthSAMLHeadlessSecuritySqlOS
Read the postSqlOS 11.0.0: Index what you sort by
Every index on a protected table is now a page order. Authorized lists page any indexed sort for about a page of work per caller, and HasPageOrder is removed.
FGAEF CorePerformanceSqlOS
Read the postSqlOS 10.0.0: Authorized pages that cost a page
ToPageAsync reads the page of an EF Core query a caller may see for about a page of work, whoever the caller is. BuildFilterAsync is removed.
FGAEF CorePerformanceSqlOS
Read the post