Concierge.Auth.Client.PeerSignature 1.1.0

dotnet add package Concierge.Auth.Client.PeerSignature --version 1.1.0
                    
NuGet\Install-Package Concierge.Auth.Client.PeerSignature -Version 1.1.0
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="Concierge.Auth.Client.PeerSignature" Version="1.1.0" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="Concierge.Auth.Client.PeerSignature" Version="1.1.0" />
                    
Directory.Packages.props
<PackageReference Include="Concierge.Auth.Client.PeerSignature" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add Concierge.Auth.Client.PeerSignature --version 1.1.0
                    
#r "nuget: Concierge.Auth.Client.PeerSignature, 1.1.0"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package Concierge.Auth.Client.PeerSignature@1.1.0
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=Concierge.Auth.Client.PeerSignature&version=1.1.0
                    
Install as a Cake Addin
#tool nuget:?package=Concierge.Auth.Client.PeerSignature&version=1.1.0
                    
Install as a Cake Tool

Concierge.Auth.Client.PeerSignature

Outbound peer-key request signing for service-to-service HTTP calls.

Registration

services.AddConciergeAuthClient(configuration, db => db.UseNpgsql(cs, ...)); // base + DB
services.AddConciergeAuthClientPeerKeys(configuration); // registers IPeerKeypairStore
services.AddConciergeAuthClientPeerSignature(configuration);
// or programmatic:
services.AddConciergeAuthClientPeerSignature(o =>
{
    o.ClientKey = "my-service";
    o.PrivateKeyPem = File.ReadAllText("peer-private.pem"); // optional when store has an active own row
});

Private key resolution order:

  1. Active own row from IPeerKeypairStore (preferred after ImportOwnPeerKeypairAsync)
  2. ConciergePeerSignatureSigningOptions.PrivateKeyPem (config fallback)

Startup fails closed when neither is available. See libs/dotnet/docs/peer-key-onboarding.md.

Attach the handler to outbound HttpClient instances:

services.AddHttpClient("downstream")
    .AddHttpMessageHandler<ConciergePeerSignatureHandler>();

Headers

Header Value
X-Client-Key This caller's client key
X-Timestamp Unix timestamp (seconds)
X-Nonce Random hex nonce
X-Signature Base64 RSA PKCS#1 v1.5 + SHA-256 over the canonical payload

Verification is provided by Concierge.Auth.Client.AuthGuard's AddConciergePeerSignature() scheme.

Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (3)

Showing the top 3 NuGet packages that depend on Concierge.Auth.Client.PeerSignature:

Package Downloads
Concierge.Auth.Client.AuthGuard

ASP.NET Core authentication schemes for AuthService-issued credentials: AddConciergeSessionToken validates opaque session tokens (Redis cache + validate fallback, §11), AddConciergeJwtBearer validates client-credential JWTs (RS256/JWKS, typ guard, jti deny-list, client-revocation epoch), AddConciergePeerSignature validates peer-key RSA request signatures (Redis nonce replay protection), AddConciergeApiKey validates API keys against a host loader, plus WebSocket handshake support. The only Concierge.Auth.Client.* package referencing ASP.NET Core or StackExchange.Redis.

Concierge.Platform.WriteClient

Peer-signed write client for THISO platform org node create/update/move/deactivate.

Concierge.Platform.SyncClient

Consumer-side sync SDK for THISO platform change alerts: RabbitMQ consumer, cold-start reconciliation scan, resume state, stale-overwrite guard, and peer-signed reconciliation HTTP client.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.1.0 128 9/12/2026
1.0.0 449 8/26/2026