identity-security-hardening
Security hardening for Duende IdentityServer deployments including signing key rotation, HTTPS enforcement, CORS configuration, CSP headers, rate limiting, token lifetime tuning, and security audit patterns.
Install
With your agent
Install OMGSkills skill "duendesoftware/duende-skills:skills/identity-security-hardening" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/DuendeSoftware/duende-skills /tmp/duende-skills && ln -s /tmp/duende-skills/skills/identity-security-hardening ~/.claude/skills/identity-security-hardeningFrom README
Identity Security Hardening When to Use This Skill Use this skill when: Hardening a Duende IdentityServer deployment before promoting to production Configuring HTTPS, HSTS, and TLS requirements for the identity server host Evaluating or enforcing client secret policies (shared secrets vs. certificates vs.
More from this repo
aspnetcore-authentication
ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication,...
aspnetcore-authorization
ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations,...
claims-authorization
Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation,...