Skip to content

Stop supporting ASP.NET Core 2.3 and remove the .NET Framework 4.6.2/4.7.2, .NET Standard 2.0/2.1 and UAP TFMs - #2455

Merged
kevinchalet merged 2 commits into
openiddict:devfrom
kevinchalet:targets
May 11, 2026
Merged

Stop supporting ASP.NET Core 2.3 and remove the .NET Framework 4.6.2/4.7.2, .NET Standard 2.0/2.1 and UAP TFMs#2455
kevinchalet merged 2 commits into
openiddict:devfrom
kevinchalet:targets

Conversation

@kevinchalet

@kevinchalet kevinchalet commented Apr 20, 2026

Copy link
Copy Markdown
Member

Related tickets: #2451, #2452 and #2453.

To proactively identify pain points that may result from the implementation of the changes mentioned in the 3 tickets, I decided to open this PR fairly early.

In a nutshell, this PR:

  • Removes the net462/net472/net48 target framework monikers from all the ASP.NET Core projects/integrations, as ASP.NET Core 2.3 will no longer be supported by Microsoft after April 2027. If the proposed plan is adopted as-is, ASP.NET Core 10 will be the only supported version in OpenIddict 8.x.
  • Removes the net462/net472/net48 target framework monikers from the Entity Framework Core integration package, as Entity Framework Core 2.3 will no longer be supported by Microsoft after April 2027. If the proposed plan is adopted as-is, Entity Framework Core 10 will be the only supported version in OpenIddict 8.x.
  • Removes the net462/net472 target framework monikers from all the OpenIddict projects. If the proposed plan is adopted as-is, .NET Framework 4.8 will be the only supported version in OpenIddict 8.x. Of course, the OWIN/ASP.NET "legacy" integrations will still be fully supported, but only when targeting .NET Framework 4.8.
  • Removes the uap10.0.17763 target framework moniker from the OpenIddict.Client.SystemIntegration package and the OpenIddict metapackage. WinUI 2.x/UWP will still be supported in OpenIddict 8.x, but only on Native AOT via the net10.0-windows10.0.17763 TFM or when targeting net48.
  • Removes the netstandard2.0 and netstandard2.1 target framework monikers from all the OpenIddict projects. If the proposed plan is adopted as-is, referencing OpenIddict 8.x packages will require targeting either net48 or net10.0.
  • Removes the ability to register OpenIddict-specific crypto primitives via CryptoConfig: the entire .NET ecosystem (BCL and libraries like IdentityModel) is moving towards one-shot static methods and these methods don't support overriding the actual crypto implementation.

My feeling is that the removal of the ASP.NET Core 2.3 support will only affect a very limited set of applications (I'll work with the affected teams to ensure they can move to 8.0 when it ships) but that the removal of Entity Framework Core 2.3 may be a lot more problematic, as it means we'll no longer be able to use the OpenIddict Entity Framework Core stores in .NET Framework apps, making EF 6.x (mostly a legacy thing) and MongoDB the only options working out-of-the-box.

@kevinchalet
kevinchalet merged commit 8b84742 into openiddict:dev May 11, 2026
6 checks passed
@kevinchalet
kevinchalet deleted the targets branch May 11, 2026 20:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant