Browse by Tags

• .NET
• .net 6
• .NET 8
• .net core
• access control
• Architecture
• ASP.NET
• asp.net Core
• asp.NET.net core
• authentication
• authorization
• blazor
• Data Access
• EF
• ef core
• Entity Framework
• future
• non-XAF
• OData
• Performance
• permissions
• RBAC
• Reporting
• REST
• RLS
• roadmap
• roles
• Usability
• v20.1
• Web
• web api
• webapi
• windows
• WPF
• XAF
• XPO

Application Security — Stronger Hashes and Safer Passwords

Every application that stores passwords makes an implicit bet: that the hashing algorithm it chose will remain strong enough to resist attacks for as long as those hashes exist. It’s worth revisiting that bet regularly. This post walks through the reasoning...

Oliver Sturm (DevExpress)

17 April 2026

.NET .net core Architecture ASP.NET Blazor Dashboard Data Access Office File API Reporting security WinForms WPF XAF

Application Security — Why One Does Not Simply Protect a Data Store Connection String and Other Login Credentials?

A developer asks: “How do I protect my connection string in a desktop application?” This is one of the most common security questions in .NET development, and it sounds like it should have a straightforward answer. But there is a fundamental problem we...

Oliver Sturm (DevExpress)

2 April 2026

.NET .net core Architecture Backend Data Access database Desktop Frontend Middle Tier ORM RDBMS REST security webapi windows WinForms WPF

Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) — Authorization Code Flow (Part 4)

This post is the next installment in my series titled Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) . The content relates to my previously published post Modern Desktop Apps And Their Complex Architectures...

Oliver Sturm (DevExpress)

6 March 2025

.NET access control authentication authorization EF ef core Entity Framework keycloak rbac REST security webapi WinForms

Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) — Authenticate Users and Protect Data (Part 3)

This post is the next installment in my series titled Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) . The content relates to my previously published post Modern Desktop Apps And Their Complex Architectures...

Oliver Sturm (DevExpress)

14 October 2024

.NET access control authentication authorization EF ef core Entity Framework keycloak rbac REST security webapi WinForms

Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) — Add Editing Features (Part 2)

I started a short series of posts a little while ago, titled Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) . It relates to my previously published post Modern Desktop Apps And Their Complex Architectures and...

Oliver Sturm (DevExpress)

23 September 2024

authentication authorization EF ef core Entity Framework REST security webapi WinForms

WinForms — Connect a .NET Desktop Client to a Middle Tier Security Server (EF Core with WebSockets)

Series Overview This article is the second in a series of posts for teams who wish to build .NET desktop applications that communicate securely with backend services. Table of Contents Intro — Modern Desktop Apps And Their Complex Architectures Choosing...

Bogdan Kharchenko (DevExpress)

18 September 2024

.NET access control ASP.NET authentication authorization EF EFCore Entity Framework grid rbac security web api webapi WinForms XAF

Connect a .NET Desktop Client to a Custom ASP.NET Core Service (EF Core with pure Web API) — Architecture and Data Binding (Part 1)

In the post Modern Desktop Apps And Their Complex Architectures I summarized a while ago how the world of application architecture has evolved in the last years. Our WinForms, WPF and .NET MAUI teams published follow-ups with Connect a .NET Desktop Client...

Oliver Sturm (DevExpress)

30 August 2024

authentication authorization EF ef core Entity Framework REST security webapi WinForms

XAF (Cross-Platform .NET App UI & Web API Service) — Year-End Roadmap (v24.2)

UPDATE: What's New in XAF (v24.2) | June 2025 Roadmap (v25.1) As always, thank you for choosing XAF . We appreciate your support. This blog post outlines some of our XAF-related development plans for the second half of 2024 (v24.2). Strategically, our...

Dennis Garavsky (DevExpress)

21 July 2024

.NET .NET 8 .NET 9 .net core 2024 asp.net Core blazor EF Core Entity Framework future OData Performance roadmap security v24.2 web api WinForms XAF XPO

WinForms — Connect a .NET Desktop Client to a Secure Backend Web API Service (EF Core with OData)

Series Overview As you may recall from an earlier post (Modern Desktop Apps And Their Complex Architectures), we want to help guide our loyal WinForms/WPF/VCL/.NET MAUI/XAF customers through new/tightened security requirements (and associated complexities...

Dennis Garavsky (DevExpress)

17 July 2024

.NET access control ASP.NET authentication authorization EF EFCore Entity Framework odata rbac security web api webapi WinForms XAF

.NET — About NuGet Package Audit and "False-Positive" Security Warnings

Over the last few years, the commitment to `information security` has evolved in a positive direction - more organizations taking a far more serious posture when it comes to system security and its associated risks. Software development processes are...

Dennis Garavsky (DevExpress)

17 July 2024

.NET .net core .NET MAUI ASP.NET Dashboards NuGet Reporting security WinForms WPF XAF