Ez4.ClientAccess 8.0.1

.NET 8.0 This package targets .NET 8.0. The package is compatible with this framework or higher.
The owner has unlisted this package. This could mean that the package is deprecated, has security vulnerabilities or shouldn't be used anymore. 
dotnet add package Ez4.ClientAccess --version 8.0.1
                    


                    

                
NuGet\Install-Package Ez4.ClientAccess -Version 8.0.1
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Ez4.ClientAccess" Version="8.0.1" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="Ez4.ClientAccess" Version="8.0.1" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="Ez4.ClientAccess" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add Ez4.ClientAccess --version 8.0.1
                    


                    

                
#r "nuget: Ez4.ClientAccess, 8.0.1"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package Ez4.ClientAccess@8.0.1
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=Ez4.ClientAccess&version=8.0.1
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=Ez4.ClientAccess&version=8.0.1
                    


                            Install as a Cake Tool

Ez4.ClientAccess

A client-path authorization library for ASP.NET Core: a request is allowed only when the calling client — identified by the azp claim on its already-authenticated JWT — appears in that client's allowed-path list. Rules are held in memory as an immutable snapshot, loaded from a JSON file with no database required. Denies render 403 application/problem+json; the only exemption from default-deny is [AllowAnonymous] on the endpoint itself.

Usage

using Ez4.ClientAccess.Policy;

var builder = WebApplication.CreateBuilder(args);
builder.AddClientPathFromJsonPolicy();

var app = builder.Build();
app.UseAuthentication();
app.UseAuthorization();

app.MapGet("/health", () => Results.Ok()).AllowAnonymous();

app.MapGet("/api/orders/{id}", (string id) => Results.Ok(new { id }))
    .RequireAuthorization("ClientPath");

app.Run();

appsettings.json:

{
  "ClientAccess": {
    "ServiceName": "orders-api",
    "SecretFile": { "PathPattern": "secret.{Environment}.json", "ReloadOnChange": true },
    "RefreshInterval": "00:00:30",
    "ChangeDebounce": "00:00:01"
  }
}

Rule file (secret.{Environment}.json), resolved from SecretFile.PathPattern:

{
  "ClientAccess": {
    "Rules": {
      "clientA": ["/api/orders", "/api/invoices"],
      "clientB": ["/api/orders"],
      "clientC": []
    }
  }
}

Run the sample

dotnet run --project samples/SampleApi
curl http://localhost:5000/health                                          # 200, no token needed
curl -H "Authorization: Bearer clientA" http://localhost:5000/api/orders/1  # 200
curl http://localhost:5000/api/orders/1                                    # 401, no token

Run the tests

dotnet test tests/Ez4.ClientAccess.Tests
Product Compatible and additional computed target framework versions.
.NET net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 was computed.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 was computed.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated