AuthEndpoints 3.4.1

.NET 10.0 This package targets .NET 10.0. The package is compatible with this framework or higher. 
dotnet add package AuthEndpoints --version 3.4.1
                    


                    

                
NuGet\Install-Package AuthEndpoints -Version 3.4.1
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="AuthEndpoints" Version="3.4.1" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="AuthEndpoints" Version="3.4.1" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="AuthEndpoints" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add AuthEndpoints --version 3.4.1
                    


                    

                
#r "nuget: AuthEndpoints, 3.4.1"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package AuthEndpoints@3.4.1
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=AuthEndpoints&version=3.4.1
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=AuthEndpoints&version=3.4.1
                    


                            Install as a Cake Tool

AuthEndpoints

nuget oauth issues downloads workflow license

AuthEndpoints is an ASP.NET Core library of ready-made auth API endpoints on top of Identity. It fits a first-party auth API for web and mobile clients (React, Next.js, Vue, Nuxt, Svelte, native apps, and similar) with email/password, cookies, JWT, and/or passkeys.

  • Ready-made endpoints for registration, login, password reset, 2FA, and session/token flows
  • Opinionated quick start with AddAuthEndpoints / UseAuthEndpoints / MapAuthEndpoints (cookie by default, Identity bearer via AuthEndpointsSignIn.IdentityBearer)
  • Account lifecycle: register, confirm email, forgot/reset password, manage info and 2FA, step-up ReAuth
  • Sign-in stacks you choose: cookie sessions, Identity bearer tokens, or Simple JWT
  • Passkeys (WebAuthn) for passwordless register and login
  • Optional emailed one-time codes (POST /identity/emailCode/send and POST /identity/emailCode/verify). Sign-up and magic links stay off until you enable them
  • Built-in hardening: rate limiting, antiforgery, lockout-aware login, hashed JWT refresh tokens with reuse detection
  • Optional preview packages for GitHub and Google OAuth: AuthEndpoints.External.OAuth plus AuthEndpoints.OAuth.GitHub and AuthEndpoints.OAuth.Google

Getting started

Requires .NET 10, ASP.NET Core Identity, and EF Core.

dotnet add package AuthEndpoints

builder.Services.AddDbContext<AppDbContext>(/* your provider */);

builder.Services.AddAuthEndpoints<AppUser, AppDbContext>(o =>
{
    o.Passkeys.ServerDomain = "example.com"; // required in Production
});

builder.Services.AddTransient<IEmailSender<AppUser>, MyEmailSender>();

var app = builder.Build();

app.UseAuthEndpoints();
app.MapAuthEndpoints<AppUser>();

app.Run();

Documentation

For configuration, composable modules, route tables, and production guidance, see the AuthEndpoints documentation.

AI agents

Add the coding-agent skill from this repository:

npx skills add madeyoga/AuthEndpoints

See AI agents.

Contribute

Issues and pull requests are welcome. Open an issue at madeyoga/AuthEndpoints to report bugs or propose changes.

License

This project is licensed under the MIT License.

Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (1)

Showing the top 1 NuGet packages that depend on AuthEndpoints:

Package Downloads
AuthEndpoints.External.OAuth

Minimal API endpoints for external OAuth authentication with ASP.NET Core Identity. GitHub and Google handlers ship in separate packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
3.4.1 37 10/12/2026
3.4.0 43 10/12/2026
3.3.1 44 10/12/2026
3.3.0 46 10/11/2026
3.2.0 123 10/8/2026
3.1.1 89 10/4/2026
3.1.0 252 9/20/2026
3.0.8 116 9/19/2026
3.0.7 149 9/8/2026
3.0.6 117 9/7/2026
3.0.5 133 9/6/2026
3.0.4 125 9/4/2026
3.0.3 128 9/2/2026
3.0.2 125 8/31/2026
3.0.1 164 8/28/2026
3.0.0 151 8/27/2026 3.0.0 is deprecated because it has critical bugs.
3.0.0-rc.4 111 8/2/2026 3.0.0-rc.4 is deprecated because it has critical bugs.
3.0.0-rc.3 103 7/30/2026 3.0.0-rc.3 is deprecated because it has critical bugs.
3.0.0-rc.2 142 7/25/2026 3.0.0-rc.2 is deprecated because it has critical bugs.
3.0.0-rc.1 107 7/25/2026 3.0.0-rc.1 is deprecated because it has critical bugs.
Loading failed

Passkey register with RequireConfirmedAccount off returns the Identity bearer token response when useCookies and useSessionCookies are unset. Cookie register still returns credentialId. Simple JWT register returns the access token and refresh cookie. No migration.