WoW2.Sdk.Beta.Be.Identity.Server
10.0.10-beta
Prefix Reserved
dotnet add package WoW2.Sdk.Beta.Be.Identity.Server --version 10.0.10-beta
NuGet\Install-Package WoW2.Sdk.Beta.Be.Identity.Server -Version 10.0.10-beta
<PackageReference Include="WoW2.Sdk.Beta.Be.Identity.Server" Version="10.0.10-beta" />
<PackageVersion Include="WoW2.Sdk.Beta.Be.Identity.Server" Version="10.0.10-beta" />
<PackageReference Include="WoW2.Sdk.Beta.Be.Identity.Server" />
paket add WoW2.Sdk.Beta.Be.Identity.Server --version 10.0.10-beta
#r "nuget: WoW2.Sdk.Beta.Be.Identity.Server, 10.0.10-beta"
#:package WoW2.Sdk.Beta.Be.Identity.Server@10.0.10-beta
#addin nuget:?package=WoW2.Sdk.Beta.Be.Identity.Server&version=10.0.10-beta&prerelease
#tool nuget:?package=WoW2.Sdk.Beta.Be.Identity.Server&version=10.0.10-beta&prerelease
WoW2.Sdk.Beta.Be.Identity.Server
The OpenID Connect provider the Identity service runs over the Form 1 module: OpenIddict 7.7.2 with its EF Core stores
on the Module's IdentityDbContext, the pass-through endpoints on the Module's sign-in session, the client registry
seeded from configuration, certificates from the settings (inline PEM bundles or file paths) checked at boot, and the
instance's Data Protection ring in its database. Products do not reference it; the Identity service does. The
back-channel sender and exchange grants (I19) come later.
services.AddUserAccounts(configureDatabase: database => database.SchemaOwner = IdentitySchemaOwnerConstants.Service)
.AddArgon2Passwords()
.AddSignIn()
.AddSecurityStampValidation()
.AddSessions() // sid in the cookie and the tokens; revoking ends the grants
.AddSignInLog()
.AddOrganizations()
.AddAccountEndpoints()
.AddOidcServer() // Identity:Server binds over any code options
.AddDataProtectionRing(); // Identity:DataProtection: the ring's certificates
services.AddCookieAuthentication(); // the sign-in session the authorize endpoint reads
app.UseAuthentication();
app.MapGroup("/api/account").MapUserAccountEndpoints(); // POST login?useCookies=true starts the session
app.MapOidcServerEndpoints(); // /connect/{authorize,token,userinfo,endsession}
| Folder | Holds | Lead doc |
|---|---|---|
OidcServer/ |
AddOidcServer, MapOidcServerEndpoints, OidcServerOptions and OidcClientOptions, the claim mapping, the client seeding and the session revocation handler |
oidc-server.md |
Keys/ |
ISigningKeySource, SettingsSigningKeySource, CertificateSetting, SigningKeyValidator, the per-token key pick, SigningCertificateGenerator, the keys generate command |
keys.md |
DataProtection/ |
AddDataProtectionRing, DataProtectionRingOptions, the database repository and the certificate wrapping |
data-protection.md |
- Grants: authorization code with PKCE (S256 only) and rotating refresh tokens; no implicit, password or client credentials grant.
- Tokens: access tokens are unencrypted JWTs a resource server verifies offline against the JWKS; codes and refresh
tokens are encrypted. Lifetimes default to code 60 s, access 10 min, ID 5 min, refresh 12 h absolute. With sessions,
both tokens carry
sid. - Tables:
identity_oidc_applications,_authorizations,_scopes,_tokens(Module's002-oidc) andidentity_data_protection_keys(003-spine); this package only reads and writes them. - Boot fails closed on unusable keys, on ephemeral keys outside a local run, on an invalid client registry, and on a missing or unfit ring certificate outside a local run.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- OpenIddict.AspNetCore (>= 7.7.2)
- OpenIddict.EntityFrameworkCore (>= 7.7.2)
- WoW2.Sdk.Beta.Be (>= 10.0.94-beta)
- WoW2.Sdk.Beta.Be.Identity.Module (>= 10.0.10-beta)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 10.0.10-beta | 30 | 10/30/2026 |
| 10.0.9-beta | 34 | 10/30/2026 |
| 10.0.8-beta | 40 | 10/28/2026 |
| 10.0.7-beta | 35 | 10/28/2026 |
| 10.0.6-beta | 36 | 10/28/2026 |
| 10.0.5-beta | 44 | 10/28/2026 |
| 10.0.4-beta | 39 | 10/28/2026 |
| 10.0.3-beta | 44 | 10/27/2026 |
| 10.0.2-beta | 45 | 10/27/2026 |
| 10.0.1-beta | 42 | 10/27/2026 |
| 10.0.0-beta | 52 | 10/27/2026 |