HoneyDrunk.Auth.AspNetCore 0.2.0

HoneyDrunk.Auth.AspNetCore

ASP.NET Core integration for HoneyDrunk.Auth - Middleware, identity accessors, and authorization endpoint helpers.

🌐 What Is This?

This package provides middleware and extensions for integrating HoneyDrunk.Auth with ASP.NET Core applications. It includes authentication middleware that automatically validates Bearer tokens, HttpContext-based identity accessors, and convenient authorization helpers for endpoints.

📦 Installation

dotnet add package HoneyDrunk.Auth.AspNetCore

<PackageReference Include="HoneyDrunk.Auth.AspNetCore" Version="0.1.0" />

🚀 Quick Start

1. Register Services

builder.Services.AddHoneyDrunkAuthAspNetCore();

2. Configure Middleware

app.UseGridContext();      // Grid context propagation
app.UseHoneyDrunkAuth();   // Authentication middleware

3. Access Identity

app.MapGet("/profile", (IAuthenticatedIdentityAccessor identity) =>
{
    if (!identity.IsAuthenticated)
        return Results.Unauthorized();

    return Results.Ok(new
    {
        identity.Identity!.SubjectId,
        identity.Identity.DisplayName,
        Roles = identity.Identity.GetClaimValues(AuthClaimTypes.Role)
    });
});

4. Authorize Requests

app.MapPost("/admin/action", async (HttpContext ctx) =>
{
    var request = new AuthorizationRequest(
        action: "admin",
        resource: "system",
        requiredRoles: ["admin"]);

    if (!await ctx.AuthorizeOrForbidAsync(request))
        return Results.Empty;  // 403 already sent

    // Authorized - perform action
    return Results.Ok();
});

🔧 Key Components

Middleware

Identity Access

Authorization Helpers

💡 Usage Examples

Check Authentication

app.MapGet("/me", (IAuthenticatedIdentityAccessor identity) =>
{
    if (!identity.IsAuthenticated)
        return Results.Unauthorized();

    return Results.Ok(new { identity.Identity!.SubjectId });
});

Role-Based Authorization

app.MapDelete("/users/{id}", async (HttpContext ctx, string id) =>
{
    var request = new AuthorizationRequest(
        action: "delete",
        resource: $"users/{id}",
        requiredRoles: ["admin"]);

    if (!await ctx.AuthorizeOrForbidAsync(request))
        return Results.Empty;

    // Delete user...
    return Results.NoContent();
});

Scope-Based Authorization

app.MapPost("/documents", async (HttpContext ctx) =>
{
    var request = new AuthorizationRequest(
        action: "create",
        resource: "documents",
        requiredScopes: ["documents:write"]);

    var decision = await ctx.AuthorizeAsync(request);
    
    if (!decision.IsAllowed)
    {
        return Results.Json(new
        {
            error = "Forbidden",
            reasons = decision.DenyReasons.Select(r => r.Message)
        }, statusCode: 403);
    }

    // Create document...
    return Results.Created("/documents/123", new { id = "123" });
});

Simple Authentication Check

app.MapGet("/protected", (HttpContext ctx) =>
{
    if (!ctx.RequireAuthentication())
        return Results.Empty;  // 401 already sent
    
    return Results.Ok("You are authenticated!");
});

🔀 Middleware Pipeline

The middleware should be placed after UseGridContext() for proper context propagation:

var app = builder.Build();

app.UseRouting();          // Route matching (if using controllers)
app.UseGridContext();      // Grid context propagation
app.UseHoneyDrunkAuth();   // Authentication middleware
app.UseAuthorization();    // Optional: ASP.NET Core authorization

app.MapControllers();
app.Run();

📋 What Gets Registered

When you call AddHoneyDrunkAuthAspNetCore():

📚 Dependencies

🔗 Related Packages

📖 Documentation

• AspNetCore Guide - Detailed middleware and extension documentation
• DependencyInjection Guide - Service registration
• FILE_GUIDE.md - Complete architecture reference

⚖️ License

This project is licensed under the MIT License.

<div align="center">

Built with ❤️ by HoneyDrunk Studios

</div>