Remove Duende from SPA and Blazor WASM project templates

[halter73]

[dlandi]

I agree. Duende can certainly provide its own project templates. I don't think MS should be hosting templates for commercial companies, especially in the crucial identity space. I think OpenIDDict, which has an Apache2 and is fully OIDC and OAuth2 compliant, deserves some attention from MS since it closely wraps and integrates the ASP.NET Identity/Security APIs.

[kevinchalet]

I think OpenIDDict, which has an MIT License and is fully OIDC and OAuth2 compliant, deserves some attention from MS since it closely wraps and integrates the ASP.NET Identity/Security APIs.

On a few occasions, it was mentioned by members of the ASP.NET team that contributions to OpenIddict (e.g docs) could be made but nothing ever materialized. I also tried once or twice to ask for help (e.g for adding Project Tye support to the OpenIddict samples to improve the dev' experience) but again, nothing.

I took a look at the issues associated with the new feature-token-identity label and some of the planned features - e.g an Identity-based API to change the username or the email of an account - could benefit to users of existing projects like IdSrv or OpenIddict (and could even leverage these projects for the "token generation" part). So far, I don't see any positive signal from the ASP.NET team that could indicate they are interested in doing that... very disturbing and disappointing.

I really hope we're not back to the "not-invented-here" syndrome. Sponsoring and integrating IdSrv into ASP.NET Core - even if it didn't end the way many people expected - was a step in the right direction: please don't ruin this effort.