TokenForte 1.0.1

TokenForte Documentation

Installation

dotnet add package TokenForte

Quick Setup

// Program.cs or Startup.cs
services.AddTokenForte();

Basic Usage

public class AuthController : ControllerBase
{
    private readonly ValidationService _validator;

    public AuthController(ValidationService validator)
    {
        _validator = validator;
    }

    [HttpPost("validate")]
    public async Task<IActionResult> ValidateToken([FromBody] string token)
    {
        var options = new TokenForteValidationOptions
        {
            Algorithm = TokenForteAlgorithm.HS256,
            SigningKey = "your-secret-key",
            ValidIssuer = "your-issuer",
            ValidAudience = "your-audience",
            ValidateLifetime = true
        };

        var result = await _validator.ValidateAsync(token, options);
        
        return result.IsValid ? Ok(result.Claims) : BadRequest(result.ErrorMessage);
    }
}

Algorithms

HMAC (Symmetric)

var options = new TokenForteValidationOptions
{
    Algorithm = TokenForteAlgorithm.HS256, // HS384, HS512
    SigningKey = "your-secret-key"
};

RSA (Asymmetric)

var options = new TokenForteValidationOptions
{
    Algorithm = TokenForteAlgorithm.RS256, // RS384, RS512
    SigningKey = rsaPublicKey // PEM or Base64
};

RSA-PSS

var options = new TokenForteValidationOptions
{
    Algorithm = TokenForteAlgorithm.PS256, // PS384, PS512
    SigningKey = rsaPublicKey
};

ECDSA

var options = new TokenForteValidationOptions
{
    Algorithm = TokenForteAlgorithm.ES256, // ES384, ES512
    SigningKey = ecdsaPublicKey
};

Key Formats

PEM Format

var pemKey = @"-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
-----END PUBLIC KEY-----";

Base64 Format

var base64Key = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...";

Response Format

public class TokenForteValidationResult
{
    public bool IsValid { get; set; }
    public string ErrorMessage { get; set; }
    public IDictionary<string, string> Claims { get; set; }
}

Valid Token

{
  "IsValid": true,
  "ErrorMessage": null,
  "Claims": {
    "sub": "user123",
    "iss": "your-issuer",
    "aud": "your-audience",
    "exp": "1234567890"
  }
}

Invalid Token

{
  "IsValid": false,
  "ErrorMessage": "Token has expired",
  "Claims": null
}

Advanced Usage

Custom Validation

var options = new TokenForteValidationOptions
{
    Algorithm = TokenForteAlgorithm.RS256,
    SigningKey = publicKey,
    ValidIssuer = "https://your-auth-server.com",
    ValidAudience = "your-api",
    ValidateLifetime = true
};

Multiple Algorithms

public async Task<IActionResult> ValidateAnyAlgorithm(string token, TokenForteAlgorithm algorithm)
{
    var options = new TokenForteValidationOptions
    {
        Algorithm = algorithm,
        SigningKey = GetKeyForAlgorithm(algorithm)
    };

    var result = await _validator.ValidateAsync(token, options);
    return result.IsValid ? Ok(result.Claims) : BadRequest(result.ErrorMessage);
}

Error Handling

Common error messages:

• "Token cannot be null or empty"
• "Signing key cannot be null or empty"
• "Token has expired"
• "Invalid signature"
• "Invalid issuer"
• "Invalid audience"

NuGet Package

Package Name: TokenForte
Version: 1.0.0
License: MIT
Repository: https://github.com/brixatek/TokenForte

Features

• ✅ Multiple JWT algorithms (HMAC, RSA, RSA-PSS, ECDSA)
• ✅ Multiple key formats (PEM, Base64)
• ✅ Dependency injection support
• ✅ Async/await pattern
• ✅ Comprehensive error handling
• ✅ .NET Standard 2.1 compatible