AuthEndpoints.MinimalApi 1.7.0

AuthEndpoints

A simple jwt authentication library for ASP.Net 6. AuthEndpoints library provides a set of Web API controllers and minimal api endpoints to handle basic web & JWT authentication actions such as registration, email verification, reset password, create jwt, etc. It works with custom identity user model. AuthEndpoints is built with the aim of increasing developer productivity.

Features

• Supported endpoints:
  • sign-up
  • sign-in (create jwt)
  • email verification
  • refresh jwt
  • verify jwt
  • user profile (retrieving)
  • reset password
  • change password
  • enable 2fa & login 2fa (via email)
• JWT support
• Works with a symmetric key (shared secret) or asymmetric keys (the private key of a private–public pair).
• Works with custom identity user

Current limitations

• Only works with IdentityUser or custom identity user
• No session based auth support
• 2fa via email

Installing via NuGet

The easiest way to install AuthEndpoints is via NuGet

Install the library using the following .net cli command:

dotnet add package AuthEndpoints

or in Visual Studio's Package Manager Console, enter the following command:

Install-Package AuthEndpoints

Quick start

Add DbSet<RefreshToken> to dbcontext:

using AuthEndpoints.Core.Models;

DbSet<RefreshToken>? RefreshTokens { get; set; }

Add the required identity services:

builder.Services
  .AddIdentityCore<MyCustomIdentityUser>() // <-- or `AddIdentity<,>`
  .AddEntityFrameworkStores<MyDbContext>() // <--
  .AddDefaultTokenProviders();             // <--

Next, let's add auth endpoints services and jwt bearer authentication scheme:

builder.Services
  // When no options provided, 
  // AuthEndpoints will automatically create a secret key and use single security key
  // for each access jwt and refresh jwt (symmetric encryption).
  // Secrets will be created under `keys/` directory.
  .AddAuthEndpointsCore<MyCustomIdentityUser>() // <TUser>
  .AddRefreshTokenStore<MyDbContext>()
  .AddAuthEndpointDefinitions(); // Add endpoint definitions

then finally, call app.MapEndpoints() before app.Run():

var app = builder.Build();

...

app.UseAuthentication();
app.UseAuthorization();

...

app.MapEndpoints(); // <--

app.Run();

Checkout docs for more info.

Documentations

Documentation is available at https://madeyoga.github.io/AuthEndpoints/ and in docs directory.

Contributing

Your contributions are always welcome! simply send a pull request! The up-for-grabs label is a great place to start. If you find a flaw, please open an issue or a PR and let's sort things out.

The documentation is far from perfect so every bit of help is more than welcome.