November 4, 2024 ASP.NET Core 9 introduces support for Pushed Authorization Requests (PAR) in its OpenIdConnect authentication handler. But what exactly is PAR, and why does it matter? In this post, I’ll explain what PAR is, how it works, how to use it with Duende IdentityServer, and when you should consider using it in your applications. What is Pushed Authorization Requests (PAR)?PAR is a relatively new OAuth standard that is designed to enhance the security of OAuth and OpenID Connect (OIDC) ...