dotnet · maartenba · Aug 14, 2025 · Aug 14, 2025 · Feb 9, 2026 · Feb 10, 2026
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -70,11 +70,11 @@
     <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.14.0" />
     <PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.14.0" />
     <!-- IdentityServer -->
-    <PackageVersion Include="Duende.IdentityServer" Version="7.3.2" />
-    <PackageVersion Include="Duende.IdentityServer.AspNetIdentity" Version="7.3.2" />
-    <PackageVersion Include="Duende.IdentityServer.EntityFramework" Version="7.3.2" />
-    <PackageVersion Include="Duende.IdentityServer.EntityFramework.Storage" Version="7.3.2" />
-    <PackageVersion Include="Duende.IdentityServer.Storage" Version="7.3.2" />
+    <PackageVersion Include="Duende.IdentityServer" Version="7.4.5" />
+    <PackageVersion Include="Duende.IdentityServer.AspNetIdentity" Version="7.4.5" />
+    <PackageVersion Include="Duende.IdentityServer.EntityFramework" Version="7.4.5" />
+    <PackageVersion Include="Duende.IdentityServer.EntityFramework.Storage" Version="7.4.5" />
+    <PackageVersion Include="Duende.IdentityServer.Storage" Version="7.4.5" />
     <!-- Scaffolding -->
     <PackageVersion Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="8.0.0-rc.1.23461.3" />
     <!-- Grpc -->
@@ -89,7 +89,7 @@
     <PackageVersion Include="Microsoft.Web.LibraryManager.Build" Version="3.0.71" />
     <PackageVersion Include="System.Reflection.TypeExtensions" Version="4.7.0" />
     <PackageVersion Include="xunit.v3.mtp-v2" Version="3.2.1" />
-    <PackageVersion Include="IdentityModel" Version="7.0.0" />
+    <PackageVersion Include="Duende.IdentityModel" Version="8.0.0" />
     <PackageVersion Include="Scalar.AspNetCore" Version="2.8.6" />
     <!-- Before license change -->
     <PackageVersion Include="MediatR" Version="13.0.0" />

diff --git a/README.md b/README.md
@@ -129,6 +129,14 @@ Notes:
   - Report any issues to [azure-dev](https://github.com/Azure/azure-dev/issues) repo.
   - [FAQ and troubleshoot](https://learn.microsoft.com/azure/developer/azure-developer-cli/troubleshoot?tabs=Browser) for azd.
 
+## Third-party
+
+### Duende IdentityServer
+
+The eShop application uses [Duende IdentityServer](https://duendesoftware.com/products/identityserver/), which is software that may require a license when deploying to a production environment. Depending on revenue, a free [community edition](https://duendesoftware.com/products/communityedition/) is available for production use.
+
+For development, testing, and general exploration, no license is needed.
+
 ## Contributing
 
 For more information on contributing to this repo, read [the contribution documentation](./CONTRIBUTING.md) and [the Code of Conduct](CODE-OF-CONDUCT.md).

diff --git a/src/ClientApp/ClientApp.csproj b/src/ClientApp/ClientApp.csproj
@@ -67,13 +67,13 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="IdentityModel.OidcClient" Version="6.0.0" />
+    <PackageReference Include="Duende.IdentityModel" />
+    <PackageReference Include="Duende.IdentityModel.OidcClient" Version="7.0.0" />
     <PackageReference Include="Microsoft.Maui.Controls" Version="9.0.30" />
     <PackageReference Include="Microsoft.Maui.Controls.Compatibility" Version="9.0.30" />
     <PackageReference Include="Microsoft.Maui.Controls.Maps" Version="9.0.30" />
     <PackageReference Include="Microsoft.Extensions.Logging.Debug" Version="9.0.0" />
     <PackageReference Include="CommunityToolkit.Maui" Version="9.1.1" />
-    <PackageReference Include="IdentityModel" Version="7.0.0" />
     <PackageReference Include="CommunityToolkit.Mvvm" Version="8.3.2" />
   </ItemGroup>
 

diff --git a/src/ClientApp/MauiProgram.cs b/src/ClientApp/MauiProgram.cs
@@ -12,10 +12,10 @@
 using eShop.ClientApp.Services.Settings;
 using eShop.ClientApp.Services.Theme;
 using eShop.ClientApp.Views;
-using IdentityModel.OidcClient;
+using Duende.IdentityModel.OidcClient;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Logging;
-using IBrowser = IdentityModel.OidcClient.Browser.IBrowser;
+using IBrowser = Duende.IdentityModel.OidcClient.Browser.IBrowser;
 
 namespace eShop.ClientApp;
 

diff --git a/src/ClientApp/Services/Identity/IdentityService.cs b/src/ClientApp/Services/Identity/IdentityService.cs
@@ -1,8 +1,8 @@
 using eShop.ClientApp.Models.Token;
 using eShop.ClientApp.Models.User;
 using eShop.ClientApp.Services.Settings;
-using IdentityModel.OidcClient;
-using IBrowser = IdentityModel.OidcClient.Browser.IBrowser;
+using Duende.IdentityModel.OidcClient;
+using IBrowser = Duende.IdentityModel.OidcClient.Browser.IBrowser;
 
 namespace eShop.ClientApp.Services.Identity;
 

diff --git a/src/ClientApp/Services/RequestProvider/RequestProvider.cs b/src/ClientApp/Services/RequestProvider/RequestProvider.cs
@@ -3,6 +3,7 @@
 using System.Net.Http.Headers;
 using System.Net.Http.Json;
 using System.Text.Json;
+using Duende.IdentityModel.Client;
 using eShop.ClientApp.Exceptions;
 
 namespace eShop.ClientApp.Services.RequestProvider;

diff --git a/src/ClientApp/Views/MauiAuthenticationBrowser.cs b/src/ClientApp/Views/MauiAuthenticationBrowser.cs
@@ -1,6 +1,6 @@
-using IdentityModel.Client;
-using IdentityModel.OidcClient.Browser;
-using IBrowser = IdentityModel.OidcClient.Browser.IBrowser;
+using Duende.IdentityModel.Client;
+using Duende.IdentityModel.OidcClient.Browser;
+using IBrowser = Duende.IdentityModel.OidcClient.Browser.IBrowser;
 
 namespace eShop.ClientApp.Views;
 

diff --git a/src/Identity.API/Configuration/Config.cs b/src/Identity.API/Configuration/Config.cs
@@ -14,7 +14,7 @@ public static IEnumerable<ApiResource> GetApis()
         }
 
         // ApiScope is used to protect the API 
-        //The effect is the same as that of API resources in IdentityServer 3.x
+        // The effect is the same as that of API resources in IdentityServer 3.x
         public static IEnumerable<ApiScope> GetApiScopes()
         {
             return new List<ApiScope>
@@ -26,7 +26,7 @@ public static IEnumerable<ApiScope> GetApiScopes()
         }
 
         // Identity resources are data like user ID, name, or email address of a user
-        // see: http://docs.identityserver.io/en/release/configuration/resources.html
+        // see: https://docs.duendesoftware.com/identityserver/fundamentals/resources/identity/
         public static IEnumerable<IdentityResource> GetResources()
         {
             return new List<IdentityResource>

diff --git a/src/Identity.API/Identity.API.csproj b/src/Identity.API/Identity.API.csproj
@@ -6,8 +6,10 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Duende.IdentityModel" />
     <PackageReference Include="Duende.IdentityServer.AspNetIdentity" />
     <PackageReference Include="Duende.IdentityServer.EntityFramework" />
+    <PackageReference Include="Duende.IdentityServer.EntityFramework.Storage" />
     <PackageReference Include="Duende.IdentityServer.Storage" />
     <PackageReference Include="Duende.IdentityServer" />
     <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" />

diff --git a/src/Identity.API/Quickstart/Diagnostics/DiagnosticsViewModel.cs b/src/Identity.API/Quickstart/Diagnostics/DiagnosticsViewModel.cs
@@ -2,6 +2,7 @@
 // Licensed under the Apache License, Version 2.0. See LICENSE in the project root for license information.
 
 
+using System.Buffers.Text;
 using System.Text;
 using System.Text.Json;
 
@@ -16,7 +17,7 @@ public DiagnosticsViewModel(AuthenticateResult result)
         if (result.Properties.Items.ContainsKey("client_list"))
         {
             var encoded = result.Properties.Items["client_list"];
-            var bytes = Base64Url.Decode(encoded);
+            var bytes = Base64Url.DecodeFromChars(encoded);
             var value = Encoding.UTF8.GetString(bytes);
 
             Clients = JsonSerializer.Deserialize<string[]>(value);

diff --git a/src/Identity.API/Views/Account/Logout.cshtml b/src/Identity.API/Views/Account/Logout.cshtml
@@ -3,7 +3,7 @@
 <div class="logout-page">
     <div class="lead">
         <h1>Logout</h1>
-        <p>Would you like to logut of IdentityServer?</p>
+        <p>Would you like to logout of IdentityServer?</p>
     </div>
 
     <form asp-action="Logout">

diff --git a/src/Identity.API/Views/Home/Index.cshtml b/src/Identity.API/Views/Home/Index.cshtml
@@ -7,7 +7,7 @@
 <div class="welcome-page">
     <h1>
         <img src="~/icon.jpg">
-        Welcome to IdentityServer4
+        Welcome to Duende IdentityServer
         <small class="text-muted">(version @version)</small>
     </h1>
 
@@ -25,8 +25,9 @@
         </li>
         <li>
             Here are links to the
-            <a href="https://github.com/identityserver/IdentityServer4">source code repository</a>,
-            and <a href="https://github.com/IdentityServer/IdentityServer4/tree/main/samples">ready to use samples</a>.
+            <a href="https://github.com/duendesoftware/products">source code repository</a>,
+            <a href="https://github.com/duendesoftware/samples">ready to use samples</a>,
+            and <a href="https://docs.duendesoftware.com">documentation</a>.
         </li>
     </ul>
 </div>