Security hardening for Duende IdentityServer deployments including signing key rotation, HTTPS enforcement, CORS configuration, CSP headers, rate limiting, token lifetime tuning, and security audit patterns.
Install
npx skills add DuendeSoftware/duende-skills --skill identity-security-hardeningnpx skills add DuendeSoftware/duende-skills --skill identity-security-hardening -a claude-code -gnpx skills add DuendeSoftware/duende-skills --skill identity-security-hardening -a codex -ggemini skills install https://github.com/DuendeSoftware/duende-skills.git --path skills/identity-security-hardeninggh skill install DuendeSoftware/duende-skills identity-security-hardeninggit clone --depth 1 https://github.com/DuendeSoftware/duende-skills /tmp/DuendeSoftware__duende-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/DuendeSoftware__duende-skills/skills/identity-security-hardening ~/.claude/skills/identity-security-hardening # Claude Code
cp -R /tmp/DuendeSoftware__duende-skills/skills/identity-security-hardening ~/.agents/skills/identity-security-hardening # Codex, Cursor, Gemini CLI, Copilot, OpenCode