AuthMicroservice.Core 1.0.2

AuthMicroservice

ASP.NET Core authentication & authorization template with JWT, refresh tokens, role/claim management, and external OAuth support (Google, GitHub).

Features

• JWT + Refresh Token authentication
• Role & Claim-based authorization
• Policy-based access control (ABAC)
• External OAuth (Google, GitHub)
• Clean Architecture structure
• Easy configuration via fluent API

Installation

dotnet add package AuthMicroservice

Quick Start

Program.cs:

using AuthMicroservice.Core.Extensions;

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddAuthMicroservice(options =>
{
    options.ConnectionString = builder.Configuration.GetConnectionString("DefaultConnection")!;
    options.Jwt.Secret = builder.Configuration["Jwt:Secret"]!;
    options.Jwt.Issuer = "YourApp";
    options.Jwt.Audience = "YourAppUsers";

    // Optional: External OAuth
    options.ExternalProviders.Google.Enabled = true;
    options.ExternalProviders.Google.ClientId = builder.Configuration["Google:ClientId"]!;
    options.ExternalProviders.Google.ClientSecret = builder.Configuration["Google:ClientSecret"]!;
});

builder.Services.AddControllers();

var app = builder.Build();

app.UseAuthentication();
app.UseAuthorization();
app.MapControllers();

app.Run();

appsettings.json:

{
  "ConnectionStrings": {
    "DefaultConnection": "Host=localhost;Database=authdb;Username=postgres;Password=yourpassword"
  },
  "Jwt": {
    "Secret": "YOUR_SECRET_KEY_AT_LEAST_32_CHARACTERS_LONG",
    "Issuer": "YourApp",
    "Audience": "YourAppUsers"
  }
}

Run Migrations:

dotnet ef migrations add InitialCreate
dotnet ef database update

Usage

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

[ApiController]
[Route("api/[controller]")]
public class MyController : ControllerBase
{
    [Authorize]
    [HttpGet("profile")]
    public IActionResult GetProfile()
    {
        var userId = User.FindFirst("user_id")?.Value;
        return Ok(new { userId });
    }

    [Authorize(Roles = "Admin")]
    [HttpGet("admin")]
    public IActionResult AdminOnly()
    {
        return Ok("Admin access granted");
    }
}

API Endpoints

After installation, built-in endpoints are available:

• POST /api/auth/register - Register new user
• POST /api/auth/login - Login
• POST /api/auth/refresh - Refresh token
• POST /api/auth/revoke - Revoke token
• GET /api/auth/me - Get current user
• POST /api/externalauth/google - Google OAuth
• POST /api/externalauth/github - GitHub OAuth
• GET /api/roles - List roles
• GET /api/users/{userId}/claims - Get user claims

Configuration Options

builder.Services.AddAuthMicroservice(options =>
{
    // JWT
    options.Jwt.ExpirationMinutes = 60;
    options.RefreshToken.ExpirationDays = 7;

    // Password requirements
    options.Identity.Password.RequiredLength = 8;
    options.Identity.Password.RequireDigit = true;

    // External providers (optional)
    options.ExternalProviders.Google.Enabled = true;
    options.ExternalProviders.GitHub.Enabled = true;

    // Logging
    options.Logging.EnableDetailedLogs = false; // true for development
});

Custom Policies

builder.Services.AddAuthMicroservice(options => { /* ... */ })
    .AddCustomPolicy("IsCompanyOwner", policy =>
    {
        policy.RequireClaim("company_role", "owner");
    });

Then use:

[Authorize(Policy = "IsCompanyOwner")]
[HttpDelete("company/{id}")]
public IActionResult DeleteCompany(string id) { /* ... */ }

Project Structure

AuthMicroservice/
├── Core/          # Configuration & Extensions
├── Domain/        # Entities (User, RefreshToken)
├── Application/   # Services, DTOs, Authorization
├── Infrastructure/# EF Core, Database
└── Shared/        # Constants (Roles, Policies, ClaimTypes)

License

MIT License - see LICENSE.txt

Author

Emirhan Yaman

• GitHub: @yamanemirhan