The article demonstrates use of Key Vault in aspnet core, which removes all secrets (connection strings, passwords, access keys, etc.) from configuration files and allows easy and secure secret sharing between development team members.
My experience validating ID Token in dotnet using JwtHandlerIdentityTokenValidator from IdentityModel.OidcClient, including some caveats I faced like "Endpoint is on a different host than authority"
Creating custom Roslyn Analyzer and CodeFix Provider was promised to be very easy to create a custom one. I’ve tried, and long story short — it is easy, however it took me quite a while to get started, primarily because of lack of documentation and examples. In this article are the things that I believe would save my time starting, hopefully will save your time.
Strong password don't have to be complicated to remember. Complicated passwords - are not always strong against brute-force attacks. ZXCVBN is a lib to estimate password strength not complexity