2 ms·
I think this very much depends on what you're doing. If it's the typical web app, pretty much everything you'll want is open-source, and most of the time there'
by easton 4y ago
I think this very much depends on what you're doing. If it's the typical web app, pretty much everything you'll want is open-source, and most of the time there's some first-party MS thing for what you need (auth? caching? ORM?). We use it at work and don't use any commercial libraries and don't have problems, although it's your typical microservice/distributed pattern. I'm guessing for developing desktop software there's a lot more gremlins.
It actually helps a lot that everything's so open source, because often companies will spit out a SDK for .NET to check a box and not have good docs around it because most of their customers aren't using .NET except for a few enterprise whales.
> Microsoft 's first party libraries are now increasingly designed to funnel you into Azure services.
Outside of the solution for scaling Blazor being "Azure SignalIR service" I'm having trouble with this one too. Their docs often call out Azure, but there's not a ton of bias in support (again, totally might just be that I don't get in the weeds enough).
- KRAKRISMOTT 4y agoTheir official ASP.NET OAuth documentation requires you to either pay for the third party Duende IdentityServer or use Azure cloud services. https://learn.microsoft.com/en-us/aspnet/core/security/authentication/identity https://learn.microsoft.com/en-us/aspnet/core/security/authe...
- easton 4y agoIt says you can use AAD or IdentityServer as OIDC providers, but the doc goes on to explain how to do it yourself with Entity Framework storing user data in a DB and the open source Microsoft.AspNetCore.Identity hooking it into the app. It would be odd if they only gave like Cognito as an example (especially considering AAD is free). And I didn’t know people really used IdentityServer as much in new apps, there’s other ways to do that.
- KRAKRISMOTT 4y agoIn most use cases with a separate client (e.g. in React), it's easier to use a separate OAuth server. Otherwise you will end up having to change the default cookie settings.