Skip to content
View Rufistofeles's full-sized avatar

Block or report Rufistofeles

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
rufistofeles/README.md

Rafael Pérez

"No token, no passage."

I build identity infrastructure in .NET. Shipping .NET since 2015 · Mechatronics engineer · Mexico City · Open to .NET engineering roles


🛡️ RufistoWard — the open-source IdentityServer4 replacement

OIDF conformance: Basic OP OIDF conformance: Config OP License: AGPL v3

OAuth 2.0 / OpenID Connect identity server on .NET 10. Duende priced IdentityServer out of reach and IdentityServer4 went end-of-life — so I built the replacement, and every flow is free.

  • OpenID Foundation conformance suite — Basic OP and Config OP plans published and passing (links above, verify them yourself)
  • Every OIDC / OAuth2 flow — Authorization Code + PKCE, Client Credentials, Refresh Token, Device Code (RFC 8628), Revocation (RFC 7009), Introspection (RFC 7662), Discovery + JWKS
  • Admin UI included — Tailwind CSS v4 + HTMX, no JavaScript framework
  • IdentityServer4 migration tooling — built by someone who has migrated production instances
  • 225 tests · Clean Architecture · PostgreSQL and SQL Server · AGPL-3.0 + commercial

github.com/RufistofelesDev/RufistoWard


Not a side project

I've been doing this professionally since 2015:

  • Single sign-on in production since 2019 — Azure AD and OpenID Connect across web and desktop apps. RufistoWard is that work, generalised and given away.
  • Warehouse robots, 2015–2017 — control systems for Layer Picker robots, Put-to-Light and AGVs, integrated into WMS Manhattan and SAP. Running on a real floor.
  • Enterprise integration — SOAP and REST into SAP; Mexican CFDI v3.3 and v4 electronic invoicing, built twice at two companies.

Where this comes from

I'm a mechatronics engineer who writes C#. That isn't two careers — it's one.

My first real system controlled the lights in my mother's house over the electrical wiring, because she has knee osteoarthritis and the switch was across the room. Every project since has been the same problem at a larger scale: get a signal through a channel that wasn't built for it, and prove on the other side that it arrived intact. Lights over the mains. Machines over OPC UA. Now tokens over HTTP.


Stack

.NET 10 · C# · ASP.NET Core · OAuth 2.0 / OIDC · Entity Framework Core · Clean Architecture · .NET Aspire · PostgreSQL · SQL Server · Docker · OPC UA · Tailwind · HTMX


Open to .NET engineering roles. 📫 rafael@rufistofeles.dev · 💼 LinkedIn · 🌐 rufistofeles.dev · 🐦 @Rufistofeles

Pinned Loading

  1. RufistofelesDev/RufistoWard RufistofelesDev/RufistoWard Public

    Open-source OAuth 2.0 / OpenID Connect identity server for .NET 10 — every flow free under AGPL-3.0, with a built-in Admin UI and IdentityServer4 migration tooling.

    C#

  2. RufistofelesDev/Aspire.Hosting.OpcUa RufistofelesDev/Aspire.Hosting.OpcUa Public

    OPC UA PLC simulator as a .NET Aspire hosting integration. A factory floor in your Aspire dashboard. One line. No PLC required.

    C#