JM.Core.Security 1.0.0-alpha.1

JM Core Packages

Reusable .NET packages for application, persistence, security, exception handling, and logging concerns.

Packages

All packages currently target net10.0.

Installation

Install only the packages your project needs:

dotnet add package JM.Core.Persistence --version 1.0.0
dotnet add package JM.Core.CrossCuttingConcerns --version 1.0.0
dotnet add package JM.Core.Security --version 1.0.0
dotnet add package JM.Core.Application --version 1.0.0

Package dependency order:

JM.Core.Persistence
JM.Core.CrossCuttingConcerns
JM.Core.Security -> JM.Core.Persistence
JM.Core.Application -> JM.Core.CrossCuttingConcerns, JM.Core.Persistence, JM.Core.Security

Security Setup

builder.Services.AddSecurityServices();

Configuration:

{
  "TokenOptions": {
    "Audience": "example-audience",
    "Issuer": "example-issuer",
    "AccessTokenExpiration": 60,
    "SecurityKey": "use-a-long-secure-key-from-secrets",
    "RefreshTokenTTL": 7
  }
}

Do not store production signing keys in source-controlled configuration files.

Exception Middleware Setup

app.UseExceptionMiddleware();

Register the middleware before endpoint execution so application exceptions can be converted into problem details responses.

Logging Setup

File logger configuration:

{
  "SerilogConfigurations": {
    "FileConfiguration": {
      "FolderPath": "/logs/app"
    }
  }
}

SQL logger configuration:

{
  "SerilogConfigurations": {
    "MsSqlConfiguration": {
      "ConnectionString": "Server=.;Database=Logs;Trusted_Connection=True;TrustServerCertificate=True;",
      "TableName": "Logs",
      "AutoCreateSqlTable": true
    }
  }
}

Register one logger implementation:

builder.Services.AddSingleton<LoggerServiceBase, FileLogger>();

or:

builder.Services.AddSingleton<LoggerServiceBase, MsSqlLogger>();

Caching Setup

Register an IDistributedCache implementation:

builder.Services.AddDistributedMemoryCache();

Configuration:

{
  "CacheSettings": {
    "SlidingExpiration": 2
  }
}

SlidingExpiration is interpreted as days when a request does not provide a custom expiration.

MediatR Pipeline Setup

Register only the behaviors used by the consuming application:

builder.Services.AddMediatR(configuration =>
{
    configuration.RegisterServicesFromAssembly(typeof(Program).Assembly);
});

builder.Services.AddHttpContextAccessor();
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(RequestValidationBehavior<,>));
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(AuthorizationBehavior<,>));
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(CachingBehavior<,>));
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(CacheRemovingBehavior<,>));
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(LoggingBehavior<,>));
builder.Services.AddTransient(typeof(IPipelineBehavior<,>), typeof(TransactionScopeBehavior<,>));

Register validators if using validation behavior:

builder.Services.AddValidatorsFromAssembly(typeof(Program).Assembly);

Packaging

The canonical packaging and release process is documented in NUGET_GUIDE.md.

License

This project is licensed under the MIT License.