Authagonal.Server 0.13.4

Authagonal.Server

Drop-in authentication server for ASP.NET Core. Add OAuth 2.0, OpenID Connect, SAML SSO, and a built-in login UI to your app with three lines of code.

Quick start

dotnet add package Authagonal.Server

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddAuthagonal(builder.Configuration);

var app = builder.Build();
app.UseAuthagonal();
app.MapAuthagonalEndpoints();
app.MapFallbackToFile("index.html");
app.Run();

{
  "Issuer": "https://auth.example.com",
  "Storage": {
    "ConnectionString": "UseDevelopmentStorage=true"
  }
}

That's it. You now have a fully functional auth server with:

• OAuth 2.0 / OpenID Connect: Authorization code + PKCE, refresh tokens, client credentials
• SAML 2.0 SSO: SP-initiated flows with automatic metadata parsing
• External OIDC providers: Google, Microsoft, Okta, etc.
• Built-in login UI: Customizable SPA with localization (10 languages)
• Admin APIs: User management, SSO provider management, token administration
• Password policy: Configurable strength requirements

Configuration

Clients and SSO providers can be seeded from configuration:

{
  "Clients": [
    {
      "Id": "my-app",
      "Name": "My Application",
      "GrantTypes": ["authorization_code", "refresh_token"],
      "RedirectUris": ["https://app.example.com/callback"],
      "Scopes": ["openid", "profile", "email", "offline_access"],
      "RequirePkce": true,
      "RequireSecret": false
    }
  ],
  "OidcProviders": [
    {
      "ConnectionId": "google",
      "ConnectionName": "Google",
      "MetadataLocation": "https://accounts.google.com/.well-known/openid-configuration",
      "ClientId": "your-client-id",
      "ClientSecret": "your-client-secret"
    }
  ]
}

Extensibility

Register custom implementations before AddAuthagonal, they take precedence via TryAdd:

// Custom lifecycle hooks (audit logging, webhooks, etc.)
builder.Services.AddSingleton<IAuthHook, MyAuthHook>();

// Custom email delivery (SMTP, SES, Mailgun, etc.)
builder.Services.AddSingleton<IEmailService, MyEmailService>();

// Custom user provisioning into downstream apps
builder.Services.AddSingleton<IProvisioningOrchestrator, MyProvisioner>();

builder.Services.AddAuthagonal(builder.Configuration);

Packages

Links

• GitHub
• Documentation
• Live demo