Concierge.Auth.Client.PeerSignature
1.1.0
dotnet add package Concierge.Auth.Client.PeerSignature --version 1.1.0
NuGet\Install-Package Concierge.Auth.Client.PeerSignature -Version 1.1.0
<PackageReference Include="Concierge.Auth.Client.PeerSignature" Version="1.1.0" />
<PackageVersion Include="Concierge.Auth.Client.PeerSignature" Version="1.1.0" />
<PackageReference Include="Concierge.Auth.Client.PeerSignature" />
paket add Concierge.Auth.Client.PeerSignature --version 1.1.0
#r "nuget: Concierge.Auth.Client.PeerSignature, 1.1.0"
#:package Concierge.Auth.Client.PeerSignature@1.1.0
#addin nuget:?package=Concierge.Auth.Client.PeerSignature&version=1.1.0
#tool nuget:?package=Concierge.Auth.Client.PeerSignature&version=1.1.0
Concierge.Auth.Client.PeerSignature
Outbound peer-key request signing for service-to-service HTTP calls.
Registration
services.AddConciergeAuthClient(configuration, db => db.UseNpgsql(cs, ...)); // base + DB
services.AddConciergeAuthClientPeerKeys(configuration); // registers IPeerKeypairStore
services.AddConciergeAuthClientPeerSignature(configuration);
// or programmatic:
services.AddConciergeAuthClientPeerSignature(o =>
{
o.ClientKey = "my-service";
o.PrivateKeyPem = File.ReadAllText("peer-private.pem"); // optional when store has an active own row
});
Private key resolution order:
- Active own row from
IPeerKeypairStore(preferred afterImportOwnPeerKeypairAsync) ConciergePeerSignatureSigningOptions.PrivateKeyPem(config fallback)
Startup fails closed when neither is available. See libs/dotnet/docs/peer-key-onboarding.md.
Attach the handler to outbound HttpClient instances:
services.AddHttpClient("downstream")
.AddHttpMessageHandler<ConciergePeerSignatureHandler>();
Headers
| Header | Value |
|---|---|
X-Client-Key |
This caller's client key |
X-Timestamp |
Unix timestamp (seconds) |
X-Nonce |
Random hex nonce |
X-Signature |
Base64 RSA PKCS#1 v1.5 + SHA-256 over the canonical payload |
Verification is provided by Concierge.Auth.Client.AuthGuard's AddConciergePeerSignature() scheme.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- Concierge.Auth.Client.Keys (>= 2.2.0)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 10.0.11)
- Microsoft.Extensions.Hosting.Abstractions (>= 10.0.11)
- Microsoft.Extensions.Options.ConfigurationExtensions (>= 10.0.11)
NuGet packages (3)
Showing the top 3 NuGet packages that depend on Concierge.Auth.Client.PeerSignature:
| Package | Downloads |
|---|---|
|
Concierge.Auth.Client.AuthGuard
ASP.NET Core authentication schemes for AuthService-issued credentials: AddConciergeSessionToken validates opaque session tokens (Redis cache + validate fallback, §11), AddConciergeJwtBearer validates client-credential JWTs (RS256/JWKS, typ guard, jti deny-list, client-revocation epoch), AddConciergePeerSignature validates peer-key RSA request signatures (Redis nonce replay protection), AddConciergeApiKey validates API keys against a host loader, plus WebSocket handshake support. The only Concierge.Auth.Client.* package referencing ASP.NET Core or StackExchange.Redis. |
|
|
Concierge.Platform.WriteClient
Peer-signed write client for THISO platform org node create/update/move/deactivate. |
|
|
Concierge.Platform.SyncClient
Consumer-side sync SDK for THISO platform change alerts: RabbitMQ consumer, cold-start reconciliation scan, resume state, stale-overwrite guard, and peer-signed reconciliation HTTP client. |
GitHub repositories
This package is not used by any popular GitHub repositories.