Andrea Chiarelli

Software Engineer and Technical Author i.e. Continuous Learner @auth0 by @okta | Microsoft MVP | Identity, .NET, API, Web, JavaScript, DevRel, DX

[Andrea Chiarelli @andychiare]

It's not easy to describe what a developer advocate does, so I wrote this booklet to explain it to anyone who's interested (and to clarify it for myself, too).

Download it now and let me know what you think! It's free! 👇

https://t.co/gKiFeyyD45

[Andrea Chiarelli @andychiare]

A guide to Token Exchange use cases: from impersonation to delegation and federated identity scenarios.
Read more: https://t.co/reBiOOkhkz

[Andrea Chiarelli @andychiare]

@SebastianCwiek_ @auth0 What do you mean, @SebastianCwiek?
I don't see any recent issues here: https://t.co/flq9YbmwV9

[Auth0 @auth0]

AI agents have two architectural layers: a deterministic core you control and a probabilistic LLM you don't.

@andychiare breaks down why securing the code around your model matters more than securing the model itself:

https://t.co/VnAsmYWI72

[Andrea Chiarelli @andychiare]

Stop confusing "Tools," "MCP servers," and "Skills" in AI. Their interchangeability creates terminological ambiguity, making AI agents harder to secure.

The following table summarizes the differences.
Learn more: https://t.co/GKH7NK0XNV

#AISecurity #LLMAgents #MCP #skills

[Andrea Chiarelli @andychiare]

Interchangeable use of "tools," "MCP servers," and "skills" by the AI community creates ambiguity with critical security implications, making architectural distinctions vital.

Check out this blog post to learn more: https://t.co/GKH7NK0pYn

[Andrea Chiarelli @andychiare]

I've started playing with local LLMs using LM Studio. Any suggestions for a coding-optimized model?

[Andrea Chiarelli @andychiare]

Effective AI agents balance two "souls": probabilistic LLMs and deterministic code.

While LLMs get the hype, traditional code is vital for security and stability.

I discuss the two souls of an AI agent in my latest blog post: https://t.co/zWbPH0shQT

#ai #agents #llm #security

[Addy Osmani @addyosmani]

https://t.co/FSx0reCCLH

[David Fowler @davidfowl]

Bring @aspiredev to your existing app without rewriting it.

In 13.3, aspire init adds the AppHost skeleton, then /aspireify helps wire your app into the Aspire model using project context. This doesn't change your application, it just describes.

Feature by @maddymontaquila!

[Andrea Chiarelli @andychiare]

📣 I just released version 2.4.0 of Auth0 Templates for .NET! 📣

The new release includes:
- .NET 10 versions of the templates
- New Backend for Frontend template
- Removed Auth0 MVC template for .NET 7.0
- Bug fixes and internal improvements

Try it!
https://t.co/6ISvThlnKq

[ASP.NET Core News @aspnetcore_news]

This week's ASP .NET Core newsletter is out! This week by @visualstudio, @chbernasconic, @raalhul, @mattconnew, @jamesnk, @andychiare, and more ❤️ Check out 'Past newsletters' here: https://t.co/bvz2c3M16B

[Auth0 @auth0]

OAuth 2.1 is officially baking security best practices into the spec. From mandatory PKCE to the death of the Implicit Flow, here is what you need to know in 60 seconds.

[ASP.NET Core News @aspnetcore_news]

Backend For Frontend Authentication Pattern with Auth0 and ASP .NET Core by @andychiare https://t.co/eWq0yYdVt3 #aspnetcore

[Dmitry Pavlov @dr_dimaka]

#dotNET 11 Preview 3 is now available!

https://t.co/c8NjPOHqdR

[Andrea Chiarelli @andychiare]

Here is my article explaining how to implement the Backend for Frontend (BFF) pattern with React and ASPNET Core using Auth0 as the IdP
https://t.co/xo8YY75bxs

[Andrea Chiarelli @andychiare]

Here's an article explaining how to implement the Backend for Frontend (BFF) pattern with React and ASPNET Core using @auth0 as the IdP: https://t.co/xo8YY75bxs

[Andrea Chiarelli @andychiare]

PKCE and BFF aren't alternatives. They solve different problems.
If you've been assuming PKCE is enough for SPA security, this is worth reading: https://t.co/WnQeTWqCa3

[Andrea Chiarelli @andychiare]

I believe that the primary purpose of using AI to develop professional production-ready software should be to improve quality rather than increase speed.
Speed will be a side effect, an added bonus.

If you focus on speed, I'm not sure you will get a better product.

[Auth0 @auth0]

The Auth0 MCP Server is now a Gemini CLI extension.

One command to install. One command to connect your tenant. Then just ask.

gemini extensions install https://t.co/ttdT0tlPQj

[Andrea Chiarelli @andychiare]

ChatGPT claims to be non-deterministic, and most of us believe it.
But is that really the case? Are LLMs truly non-deterministic?

I’ve written down a few thoughts on the subject: https://t.co/dTLBVqfPWb

#ai #llm