ZEMA.SquareOrganization 2.1.14

ZEMA.SquareOrganization.Lib

A .NET 8 library that extends ZEMA.Square.Lib to add multi-tenant organization management to any ASP.NET Core application built on the ZEMA Square platform.

Installation

dotnet add package ZEMA.SquareOrganization.Lib --version 2.1.*

Requirements

• .NET 8.0
• ZEMA.Square.Lib 2.1.x

Features

• Multi-organization (multi-tenant) data isolation via JWT OrgId claim
• User ↔ organization associations with role-based access control
• Soft-delete (archivable) and owner-managed rule base classes
• 190+ countries, states, time zones, languages, and regions — seeded automatically
• EF Core DbContext with full entity configuration
• AutoMapper profiles and FluentValidation integration (includes SquareOrgLoginDataValidator as a source-only validator)
• Localizable error messages via OrgMessages constants
• Google authentication support
• REST API endpoints for switching organization context

Getting Started

1. Register services

builder.Services.IdentityOrganizationService<
    TUser,
    TLoginData,
    TOrganization,
    TDbContext>(options =>
{
    // configure identity options
});

This registers ASP.NET Core Identity, adds an "Organization" authorization policy that requires the OrgId claim, and wires up AutoMapper profiles.

2. Seed reference data

await SeedOrganizationBase.SeedDataAsync<TDbContext>(
    serviceProvider,
    createDefaultUser: async (userManager) => { /* create super user */ },
    createDefaultOrg: async (context)     => { /* create default org  */ }
);

Populates countries, states, time zones, languages, and regions on first run.

3. Protect routes

Add the "Organization" policy to any controller or endpoint that must be scoped to an organization:

[Authorize(Policy = "Organization")]
[ApiController]
public class MyController : ControllerBase { ... }

4. Scope business rules to the current organization

Inherit from the appropriate base rule. The base class reads OrgId from the HTTP context and automatically filters all queries and enforces the organization on writes.

// Entity with Guid PK and soft-delete
public class ProductRule : OrganizationArchivableBaseGuidRule<
    TDbContext, TOrganization, TLoggedUser, Product, ProductM>
{
    public ProductRule(IServiceProvider sp) : base(sp) { }
}

Rule hierarchy:

OrganizationBaseRule<>
├── OrganizationArchivableBaseRule<>      — soft-delete entities
│   ├── OrganizationArchivableBaseGuidRule<>
│   ├── OrganizationArchivableBaseStringRule<>
│   └── OrganizationArchivableBaseValueRule<>
└── OrganizationOwnerBaseRule<>           — owner-managed entities
    ├── OrganizationOwnerBaseGuidRule<>
    ├── OrganizationOwnerBaseStringRule<>
    └── OrganizationOwnerBaseValueRule<>

Built-in API Endpoints

OrganizationSquareAccountController<> provides:

Security Model

• ISquareOrganizationLoggedUser — extends the base logged-user with OrganizationId
• ISquareOrganizationLoginData — extends login data with OrganizationId and OrganizationIdentification
• The OrgId claim is propagated through the JWT token and used by every rule to isolate data per tenant

Dependencies