Released: Jun 10, 2026

v4.2.0 での更新項目

機能

• You can now specify a custom IAccessTokenRetriever through YARP route or cluster metadata.

不具合の修正

• Cookie name prefix constants (__Host-, __Secure-) now correctly include the trailing hyphen.

Released: Mar 13, 2026

v4.1.2 での更新項目

機能

• Updated Duende.IdentityModel dependency to 8.0.1.

Released: Feb 18, 2026

v4.1.1 での更新項目

不具合の修正

• Fixed an issue where BFF will crash when openid connect options are retrieved outside of HTTP Request context.
• Fixed an issue with Stackoverflow when BFF is explicitly configured with Authentication schemes, but without ForbidScheme.

Released: Jan 29, 2026

v4.1.0 での更新項目

機能

• Introduced new extensibility point to enrich the claims from the user endpoint.

Released: Jan 29, 2026

v4.0.3 での更新項目

不具合の修正

• Fixed issue where yarp proxying doesn't calculate htu correctly.

Released: Jan 13, 2026

v4.0.2 での更新項目

不具合の修正

• Fixed nullability issues with ClaimRecord and ClaimsPrincipalRecord.

Released: Dec 12, 2025

v4.0.1 での更新項目

不具合の修正

• Fixed a problem with BFF when using DPoP. BFF should use the AccessToken instead of the serialized version of the token representation.

Released: Dec 2, 2025

v4.0.0 での更新項目

機能

• Added support for .NET 10.
• You can now check authentication state.
• Introduced BFF Trial Mode.
• Introduced Diagnostics in BFF.
• Updated the referenced Duende FOSS packages to their respective GA versions which added .NET 10 as a target.

不具合の修正

• Fixed entity framework scoping issue in ServerSideSessionChecker.
• Fixed an issue that prevents you from requesting a client credentials token from a background service.

Released: Mar 17, 2025

v3.0.0 での更新項目

機能

• .NET 9 Support.
• Blazor Support:
  • Provides comprehensive support for authentication in Blazor applications. The BFF pattern centralizes authentication logic on the server side, creating a secure environment for managing user identities and sessions.
  • As with other browser based applications, the actual authentication logic is handled on the server by the Duende BFF Security Framework. On the client, the BFF makes sure that the authentication state is in sync with the session on the server...