Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8

This is the eighth post in the series: Exploring the .NET 11 preview. Part 1 - Running background tasks in Blazor with Web WorkersPart 2 - .NET (OK, C#) finally gets union types🎉Part 3 - Avoiding ToString() allocations with StringBuilder.MoveChunksPart 4 - Closed class hierarchiesPart 5 - Improvements to reading Process outputsPart 6 - Automatic CSRF protection based on Fetch Metadata headersPart 7 - The pain of serializing unions and closed class hierarchies with System.Text.JsonPart 8 - Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core (this post) In this post I look at the new experimental support for Device Bound Session Credentials (DBSC) released for .NET 11 in the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package. In this post I show how to use the package, how to add it to an ASP.NET Core Identity application, the effect it has on the requests between the server and the browser, as well as some of the implementation details behind…