Start Debugging

Tag: signalr

9 posts

2026-09-19 messagepack security signalr

MessagePack 3.1.9 and 2.5.303 Fix a 32 KiB Payload That Allocates 120 MiB

CVE-2026-92707: nested MessagePack array headers could reuse the same trailing bytes to pass the length check, so deserializing into object allocated thousands of times the payload size. The fix, a before/after probe, and why SignalR apps on .NET 8 through 11 RC 1 need a direct package pin.

2026-09-11 csharp csharp-15 dotnet-11

C# Unions in ASP.NET Core 11: Bodies, SignalR, and OpenAPI Work, Query Strings Do Not

The ASP.NET Core team mapped out where C# 15 union types flow through .NET 11: minimal API and MVC bodies, SignalR's JsonHubProtocol, Blazor, and OpenAPI anyOf schemas. Route, query, header, and form binding are not supported yet.

2026-09-10 dotnet-11 aspnetcore signalr

SignalR in .NET 11 RC 1 Swaps an Expiring Token Without Dropping the Connection

The SignalR authentication refresh APIs are finalized in .NET 11 RC 1, with renamed callbacks on HubConnection, a TypeScript client, and Blazor Server circuits that pick up the refreshed ClaimsPrincipal automatically.

2026-08-13 dotnet-11 aspnetcore blazor

Blazor Server Circuits Now Pause Themselves When the Tab Goes Idle

.NET 11 Preview 7 adds an opt-in package that pauses interactive Server circuits when the browser tab is hidden, freeing memory and SignalR connections held by users who are not actually there.

2026-08-06 errors blazor aspnetcore

Fix: Attempting to reconnect to the server after a Blazor Server circuit disconnects

The reconnect modal means the SignalR circuit dropped, not that your app crashed. Decide whether the retry ended in failed or rejected, then fix sticky sessions, the 3-minute retention window, the 32 KB message limit, or persist circuit state with [PersistentState].

2026-08-06 comparison dotnet dotnet-11

gRPC vs REST vs SignalR for service-to-service calls in .NET 11

For internal service-to-service calls in .NET 11, default to gRPC when you own both ends of the contract and the call is point-to-point. Use REST with JSON when anything you do not control has to call the service. SignalR is not an RPC transport between services: reach for it only when one producer has to fan a message out to many long-lived consumers.

2026-07-24 aspnetcore dotnet-11 signalr

SignalR clients can finally cancel a running hub method in .NET 11 Preview 6

Cancelling the CancellationToken you pass to InvokeAsync now reaches the server and cancels the hub method. This closes a SignalR request open since 2019.

2020-11-09 signalr xamarin xamarin-forms

Creating a cross-platform chat app using Xamarin Forms and SignalR

Build a cross-platform real-time chat app in under 5 minutes using Xamarin Forms for the client and ASP.NET Core SignalR for the backend.

2020-11-04 csharp signalr xamarin-forms

How to publicly expose your local SignalR service for consumption by mobile clients using ngrok

Use ngrok to publicly expose your local SignalR service so mobile clients can connect without network configuration or SSL workarounds.