AuthEndpoints 3.0.1

dotnet add package AuthEndpoints --version 3.0.1
                    
NuGet\Install-Package AuthEndpoints -Version 3.0.1
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="AuthEndpoints" Version="3.0.1" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="AuthEndpoints" Version="3.0.1" />
                    
Directory.Packages.props
<PackageReference Include="AuthEndpoints" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add AuthEndpoints --version 3.0.1
                    
#r "nuget: AuthEndpoints, 3.0.1"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package AuthEndpoints@3.0.1
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=AuthEndpoints&version=3.0.1
                    
Install as a Cake Addin
#tool nuget:?package=AuthEndpoints&version=3.0.1
                    
Install as a Cake Tool

AuthEndpoints

nuget issues downloads workflow license

AuthEndpoints is an ASP.NET Core library of ready-made auth API endpoints on top of Identity. It fits a first-party auth API for web and mobile clients (React, Next.js, Vue, Nuxt, Svelte, native apps, and similar) with email/password, cookies, JWT, and/or passkeys.

  • Ready-made endpoints for registration, login, password reset, 2FA, and session/token flows
  • Opinionated quick start with AddAuthEndpoints / UseAuthEndpoints / MapAuthEndpoints
  • Account lifecycle: register, confirm email, forgot/reset password, manage info and 2FA, step-up ReAuth
  • Sign-in stacks you choose: cookie sessions, Identity bearer tokens, or Simple JWT
  • Passkeys (WebAuthn) for passwordless register and login
  • Built-in hardening: rate limiting, antiforgery, lockout-aware login, hashed JWT refresh tokens with reuse detection
  • Optional package AuthEndpoints.External.OAuth for GitHub/Google OAuth

Getting started

Requires .NET 10, ASP.NET Core Identity, and EF Core.

dotnet add package AuthEndpoints
builder.Services.AddDbContext<AppDbContext>(/* your provider */);

builder.Services.AddAuthEndpoints<AppUser, AppDbContext>(o =>
{
    o.Passkeys.ServerDomain = "example.com"; // required in Production
});

builder.Services.AddTransient<IEmailSender<AppUser>, MyEmailSender>();

var app = builder.Build();

app.UseAuthEndpoints();
app.MapAuthEndpoints<AppUser>();

app.Run();

Documentation

For configuration, composable modules, route tables, and production guidance, see the AuthEndpoints documentation.

Contribute

Issues and pull requests are welcome. Open an issue at madeyoga/AuthEndpoints to report bugs or propose changes.

License

This project is licensed under the MIT License.

Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (1)

Showing the top 1 NuGet packages that depend on AuthEndpoints:

Package Downloads
AuthEndpoints.External.OAuth

Minimal API endpoints for external OAuth authentication (GitHub, Google) with ASP.NET Core Identity

GitHub repositories

This package is not used by any popular GitHub repositories.

Passkey register and login honor CanSignInAsync, so confirmed-account (and other Identity sign-in) policy matches password and OAuth.