[HOWTO] Using Path.Combine correctly to ensure cross-platform compatibility

I guess every .NET developer is familiar with the Path.Combine method. But, is every .NET developer using it correctly to ensure its result is cross-platform compatible? I guess no as I was one of these developers who didn't use it correctly. Did you ever see something like this? var arbitraryPath = Path.GetFullPath( Path.Combine( AppContext.BaseDirectory, @"..\..\..\..\ArbitraryDirectory" ) ); This works flawlessly on Windows.

blog.rufer.be

[HOWTO] Successfully migrate a .NET 10 test project from VSTest to Microsoft.Testing.Platform (MTP)

The author migrated a .NET 10 test project from VSTest to Microsoft.Testing.Platform due to CI/CD pipeline failures after a NuGet package update. The post details the migration process, highlighting necessary changes in the Azure DevOps pipeline and .csproj file to resolve errors and achieve successful test runs in both Visual Studio and the Azure DevOps YAML pipeline.

blog.rufer.be

[HOWTO] Get Azure Function key and set it as value of a not managed key vault secret using Terraform and AzAPI provider

The blog post details implementing Azure Function key retrieval and storage in a Key Vault secret using AzAPI provider, highlighting the configuration process and solution achieved.

blog.rufer.be

[HOWTO] Delete Azure DevOps users with principalName starting with OIDCONFLICT_UpnReuse_

In Azure DevOps organizations that are connected to Microsoft Entra, you may spot (duplicated) users with email prefixed with OIDCONFLICT_UpnReuse_{OID_HERE} (i.e. when trying to give them access or when mentioning them): Such users are neither visible in the Azure DevOps Web UI under Organization settings > General > Users nor when querying all users via graph or via the Azure DevOps CLI.

blog.rufer.be

[HOWTO] Delete users created by bots in Azure AD B2C

Multifactor authentication via SMS is vulnerable to bot attacks, potentially leading to high costs from automated account creations. To mitigate risks, it's recommended to disable SMS MFA, implement stronger bot protection, or disable sign-ups. If attacked, quickly identify and delete bot-created accounts using Azure portal and PowerShell scripts to manage user identities.

blog.rufer.be

[HOWTO] Implement Audit Logging in a .NET Core application using Entity Framework Core and Audit.NET

This blog post outlines the implementation of audit logging using Audit.NET in .NET Core applications with Entity Framework Core. It discusses the purpose of audit logs, which enhance traceability and compliance, and details the setup process, including modifying the DbContext, creating tracking properties, and configuring audit data storage in a dedicated entity.

blog.rufer.be

[Headache Prevention] Workaround for the error “Could not authenticate user with requested resource” when accessing the Aspire dashboard

Recently, I deployed a .NET Aspire solution to Azure Container Apps (via Azure Container registry). The Azure Container Apps resource is running within my personal Azure tenant. In my personal tenant, my user is assigned as Owner of the corresponding resource group and therefore also Owner (by inheritance) of the Container Apps Environment which resides within the same resource group. Furthermore, my user has Azure built-in role…

blog.rufer.be

[HOWTO] Restore credentials of Work or School account(s) in Microsoft Authenticator App

Switching Android smartphones complicates restoring Work or School account credentials, requiring re-signing into accounts and possibly resetting MFA.

blog.rufer.be

Implement forgot your password using swiyu, ASP.NET Core Identity and Aspire

This post show to implement a “Forgot your password” flow using the Swiss Digital identity and trust infrastructure, (swiyu) in an ASP.NET Core web application using ASP.NET Core Identi…

damienbod.com

GitHub - secure-web-apps/EndToEndSecurityWeb: Secure Web application using ASP.NET Core, Angular, SonarQube and terraform. This repository hosts the source code for our .NET User Group Switzerland tou...

Secure Web application using ASP.NET Core, Angular, SonarQube and terraform. This repository hosts the source code for our .NET User Group Switzerland tour. - secure-web-apps/EndToEndSecurityWeb

github.com

End-to-End Secure Web Development with .NET Aspire, JavaScript, E-ID, Wed, Oct 29, 2025, 6:00 PM | Meetup

Hello Berner .NET friends The e-ID was approved by a narrow majority in the referendum. Let's take this opportunity to look at security and the integration of e-ID into ou

meetup.com

Use swiyu, the Swiss E-ID to authenticate users with Duende and .NET Aspire

This post shows how to authenticate users using Duende IdentityServer and ASP.NET Core Identity which verifies identities (verifiable digital credentials) using the Swiss Digital identity and trust…

damienbod.com

Software Composition Analysis in SonarQube Advanced Security for SonarQube Cloud

On the 15th of September, 2025, Sonar finally released the long-awaited Software Composition Analysis (SCA) to SonarQube Advanced Security for SonarQube Cloud! Software Composition Analysis (SCA) is an ideally automated process that analyzes software codebases to identify or detect embedded open-source software/components. The identified/detected dependencies form the basis for the following features that SCA tools typically offer. Detection of known security vulnerabilities based on data from…

blog.rufer.be

[HOWTO] Configure a custom domain and App Service Managed Certificate with Terraform

Configuring a custom domain for an Azure App Service including a App Service Managed Certificate is the kind of task where I constantly have to look up the details. For this reason, and because a colleague asked me to blog about it, I decided to briefly document the process here.

blog.rufer.be

[HOWTO] Enable and configure Defender for Storage at the storage account level by using Terraform

The author aimed to enable Defender for Storage on a dedicated storage account using Terraform, updating the existing configuration. Although the Terraform apply succeeded, the feature was not enabled. After research, the issue was resolved by adjusting user roles, allowing a subsequent Terraform apply to produce the desired outcome.

blog.rufer.be

End-to-End Secure Web Development with .NET Aspire, JavaScript, E-ID, Wed, Oct 29, 2025, 6:00 PM | Meetup

Hello Berner .NET friends The e-ID was approved by a narrow majority in the referendum. Let's take this opportunity to look at security and the integration of e-ID into ou

meetup.com

End-to-End Secure Web Development with .NET Aspire, JavaScript, E-ID, Wed, Oct 29, 2025, 6:00 PM | Meetup

Hello Berner .NET friends The e-ID was approved by a narrow majority in the referendum. Let's take this opportunity to look at security and the integration of e-ID into ou

meetup.com

Six interesting use cases for Azure DevOps MCP Server for the daily work of a developer

While preparing my session for DWX 2025, in which I demonstrated a simple use case for Azure DevOps MCP Server (creating a user story from within the IDE), I came up with some other interesting use cases for the daily work of a developer. Now that I have tested them, I will outline the use cases I have discovered in this blog post.

blog.rufer.be

[HOWTO] Upload files to an Azure storage account using Terraform

This blog post describes how to automate the upload of files to an Azure storage account using Terraform.

blog.rufer.be

[Best Practice] Make Application Configuration of ASP.NET Core applications obvious

In my work as a software developer, I have already been involved in numerous existing .NET software projects. Nearly all of these existing code bases had at least one thing in common: application configuration was not obvious. But why? Especially in the .NET ecosystem everything required to make it obvious is there. In this blog post I share my personal best practice to counteract this situation.

blog.rufer.be

[HOWTO] Fix TF400813 error response when using Azure DevOps MCP Server

While testing the local Azure DevOps MCP Server public preview, TF400813 error occurred due to wrongly selected default Azure subscription. Re-running az login to and selecting the correct subscription resolved the problem, allowing the server to function properly.

blog.rufer.be

Using multiple external identity providers from ASP.NET Core Identity and Duende IdentityServer

This blog post shows how an ASP.NET Core Identity application can integrate and implement multiple external identity providers. An OIDC client UI uses the solution and is implemented using Duende I…

damienbod.com

[HOWTO] Send emails via SMTP in PowerShell

This week, I tested Office 365 SMTP credentials using PowerShell. I created a script that defines sender and receiver email addresses, subject, and message, and sets up an SMTP client with secure credentials. The server is smtp.office365.com, using SSL on port 587 to send the email successfully.

blog.rufer.be

The Aspire Compiler

At the heart of Aspire is a resource model. It defines the shape of your application — its services, dependencies, configuration, and how…

medium.com