Corely.IAM 1.0.0

Corely.IAM

Host-agnostic, multi-tenant identity and access management for .NET applications. Drop-in authentication, authorization, RBAC, and permission management — no external service dependencies.

graph LR
    subgraph Host App
        A[IAMOptions.Create] --> B[AddIAMServices]
    end
    B --> C[IRegistrationService]
    B --> D[IAuthenticationService]
    B --> E[IRetrievalService]
    B --> F[IModificationService]
    B --> G[IMfaService]
    C & D & E & F & G --> H[Processors]
    H --> I[Repositories]
    I --> J[(Database)]

    style A fill:#4a9eff,color:#fff
    style B fill:#4a9eff,color:#fff
    style C fill:#2ecc71,color:#fff
    style D fill:#2ecc71,color:#fff
    style E fill:#2ecc71,color:#fff
    style F fill:#2ecc71,color:#fff
    style G fill:#2ecc71,color:#fff
    style H fill:#f39c12,color:#fff
    style I fill:#e74c3c,color:#fff
    style J fill:#9b59b6,color:#fff

Highlights

• Multi-tenant accounts — users belong to multiple accounts with scoped RBAC
• CRUDX permissions — fine-grained Create / Read / Update / Delete / Execute per resource type
• Token-based auth — JWT with custom claims, no HttpContext dependency
• Multi-factor authentication — TOTP (authenticator apps) with recovery codes
• Google Sign-In — link Google accounts as an alternative auth method
• Invitation system — token-based onboarding with expiry and revocation
• Per-entity encryption — account and user-scoped key pairs, stored encrypted
• Pluggable crypto — configure algorithms via the IAMOptions builder
• Three database providers — SQL Server, MySQL, MariaDB via EF Core

Quick Start

// Register services
var options = IAMOptions.Create(configuration, securityConfigProvider, efConfigFactory);
services.AddIAMServices(options);

// Register a user and account
var registrationService = serviceProvider.GetRequiredService<IRegistrationService>();

var userResult = await registrationService.RegisterUserAsync(
    new RegisterUserRequest("admin", "admin@example.com", "P@ssw0rd!"));

var accountResult = await registrationService.RegisterAccountAsync(
    new RegisterAccountRequest("My Organization"));

Documentation

Solution Structure

License

See LICENSE for details.