MonoCloud.Authentication.Api 0.1.1

Introduction

MonoCloud Api Authentication SDK for .NET – secure access token validation for ASP.NET Core APIs and resource servers.

MonoCloud is a modern, developer-friendly Identity & Access Management platform.

This SDK enables ASP.NET Core APIs to validate incoming access tokens issued by MonoCloud. It is implemented as a standard ASP.NET Core authentication handler, so it plugs directly into AddAuthentication(), [Authorize], and the authorization policy system.

The SDK handles:

• JWT access token validation with signature and claims verification
• Opaque token introspection (RFC 7662) with automatic JWT vs. opaque detection
• Scope and group-based authorization through the standard policy system
• Optional caching of introspection results via IIntrospectionCache
• mTLS certificate-bound token validation (RFC 8705)
• Multiple client authentication methods for introspection

📘 Documentation

• Documentation: https://www.monocloud.com/docs
• Quickstart: https://www.monocloud.com/docs/quickstarts/dotnet-api-authentication
• SDK Reference: https://www.monocloud.com/docs/sdks/dotnet-api-authentication
• API Reference: https://monocloud.github.io/api-authentication-dotnet

Supported Platforms

This SDK supports applications targeting >= .NET 6.0

📦 Installation

dotnet add package MonoCloud.Authentication.Api

Usage

using System.Security.Claims;
using MonoCloud.Authentication.Api;

var builder = WebApplication.CreateBuilder(args);

builder.Services
    .AddAuthentication(MonoCloudAuthenticationDefaults.AuthenticationScheme)
    .AddMonoCloudAuthentication(options =>
    {
        options.TenantDomain = "https://<your-tenant-domain>";
        options.Audience = "<your-api-identifier>";

        // Required only for opaque (reference) token introspection:
        // options.ClientId = "<your-client-id>";
        // options.ClientAuth = new ClientSecretAuth("<your-client-secret>");
    });

builder.Services.AddAuthorization();

var app = builder.Build();

app.UseAuthentication();
app.UseAuthorization();

app.MapGet("/api/protected", (ClaimsPrincipal user) => $"Hello {user.Identity?.Name}")
   .RequireAuthorization();

app.Run();

The handler detects the token format automatically — JWTs are validated locally against the tenant's signing keys, and opaque tokens are introspected.

For full usage (scope/group authorization, client authentication methods, claims caching, mTLS certificate binding, and events), see the documentation and the GitHub repository.

🤝 Contributing & Support

Issues & Feedback

• Use GitHub Issues for bug reports and feature requests.
• For tenant or account-specific help, contact MonoCloud Support through your dashboard.

Security

Do not report security issues publicly. Please follow the contact instructions at: https://www.monocloud.com/contact

📄 License

Licensed under the MIT License. See the included LICENSE file.