EntraQuick 1.0.0

EntraQuick

Scaffold Azure Entra ID authentication for .NET APIs in seconds — not hours.

EntraQuick is a dotnet tool that eliminates the friction of setting up Azure Entra ID authentication in .NET projects. Instead of following 15–20 manual steps across the Azure Portal, appsettings.json, and Program.cs, just run one command.

Installation

dotnet tool install --global EntraQuick

Requires .NET 9 SDK.

Quick start

Interactive wizard

entra-quick init

A step-by-step wizard guides you through every option and shows you exactly which files will be created before writing anything to disk.

Direct flags (scriptable)

entra-quick init \
  --type api \
  --auth-flow client-credentials \
  --roles Admin,Reader,Writer \
  --swagger \
  --output ./src/Auth \
  --namespace MyApi.Auth

Preview without writing files

entra-quick init --type api --auth-flow client-credentials --dry-run

Commands

entra-quick init

Generates authentication scaffolding for your project.

entra-quick doctor

Validates an existing appsettings.EntraId.json:

entra-quick doctor --appsettings ./src/Auth/appsettings.EntraId.json

Checks for: valid GUIDs, placeholder values, correct Audience format, standard Instance URL.

entra-quick list-templates

Shows all available auth flow templates and the files they generate.

Generated files

Running entra-quick init --type api --auth-flow client-credentials --roles Admin,Reader --swagger produces:

Auth/
├── AuthenticationExtensions.cs      # AddEntraIdAuthentication() + UseEntraIdAuthentication()
├── appsettings.EntraId.json         # AzureAd config section (fill in your TenantId/ClientId)
├── ClaimsPrincipalExtensions.cs     # GetObjectId(), GetTenantId(), GetRoles(), IsInAppRole()
├── AppRoles.cs                      # public const string Admin = "Admin"; ...
├── AuthorizationPolicies.cs         # AddEntraIdPolicies() with RequireAdmin, RequireReader
├── SwaggerAuthExtensions.cs         # AddEntraIdSwagger() + UseEntraIdSwagger()
└── SETUP.md                         # Step-by-step integration guide

Integrating into your project

Add to Program.cs:

// Load config
builder.Configuration.AddJsonFile("Auth/appsettings.EntraId.json", optional: false);

// Register services
builder.Services.AddEntraIdAuthentication(builder.Configuration);
builder.Services.AddEntraIdPolicies();          // if --roles was used
builder.Services.AddEntraIdSwagger(...);        // if --swagger was used

var app = builder.Build();

app.UseEntraIdAuthentication();
app.UseEntraIdSwagger(...);                     // if --swagger was used

Then update Auth/appsettings.EntraId.json with your real TenantId and ClientId.

Azure provisioning

With --provision-azure, EntraQuick creates the App Registration automatically (requires az cli and an active session):

entra-quick init \
  --type api \
  --auth-flow client-credentials \
  --roles Admin,Reader \
  --provision-azure \
  --app-name "MyApi-Dev"

EntraQuick will:

1. Verify az is installed and you are logged in
2. Show the active subscription and ask for confirmation
3. Create the App Registration
4. Set the Application ID URI (api://<clientId>)
5. Create App Roles
6. Create the Service Principal
7. Generate a Client Secret (for client-credentials only)
8. Fill in real values in the generated appsettings.EntraId.json

Supported auth flows

All flows support single-tenant and multi-tenant (multi-tenant disables issuer validation automatically).

Requirements

• .NET 9 SDK
• az cli (only for --provision-azure and doctor with Azure validation)

Contributing

PRs are welcome. See CLAUDE.md for architecture details and coding conventions.

git clone https://github.com/DieSatan/entra-quick
cd entra-quick
dotnet build
dotnet test

License

MIT © Gustavo Aguilera