dotkit 1.0.0

dotkit

A .NET CLI tool that installs and configures JWT Authentication in ASP.NET Core Web API projects with a single command.

Features

• Installs Microsoft.AspNetCore.Authentication.JwtBearer NuGet package
• Adds Jwt section to appsettings.json with auto-generated secret key
• Creates JwtSettings and JwtService ready-to-use classes
• Injects JWT authentication, DI registration, and middleware into Program.cs
• Configures User Secrets for SecretKey, Issuer, and Audience (or writes them to appsettings.json via --no-user-secrets)
• Logs progress to console and rolling files via Serilog

Installation

dotnet tool install --global dotkit

Usage

dotkit install [options]

Options

Examples

# Default: stores values in User Secrets
dotkit install

# Custom values
dotkit install --project ./MyApi --issuer "MyApp" --audience "MyApp"

# Write values directly to appsettings.json (skip User Secrets)
dotkit install --no-user-secrets --secret-key "your-32-char-min-key-here..."

What it does

1. Detects the ASP.NET Core Web API project (must target Microsoft.NET.Sdk.Web)
2. Installs Microsoft.AspNetCore.Authentication.JwtBearer NuGet package
3. Merges Jwt section into appsettings.json
4. Creates Configuration/JwtSettings.cs and Services/JwtService.cs
5. Injects into Program.cs:
   • Required using directives
   • builder.Services.AddAuthentication().AddJwtBearer() with TokenValidationParameters
   • builder.Services.Configure<JwtSettings>(...)
   • builder.Services.AddScoped<JwtService>()
   • app.UseAuthentication() and app.UseAuthorization()
6. Configures SecretKey, Issuer, and Audience via User Secrets (or appsettings.json)

After running, inject JwtService in any controller and call GenerateAccessToken() to issue JWTs.

Secret storage modes

Lifecycle

dotkit install [options]
             │
             ▼
    ┌─────────────────────┐
    │  Initialize Serilog   │  → %TEMP%\dotkit\logs\dotkit-YYYYMMDD.log
    └─────────┬───────────┘
              ▼
    ┌─────────────────────┐
    │  ProjectDetector    │  ← Reads .csproj from directory
    │  .Detect()          │
    └─────────┬───────────┘
              ▼
    ┌─────────────────────┐
    │  JwtInstaller       │  ← dotnet add package
    │  .InstallAsync()    │     Microsoft.AspNetCore.Authentication.JwtBearer
    └─────────┬───────────┘
              ▼
    ┌─────────────────────┐
    │  JsonEditor         │  ← Merges Jwt section from template
    │  .UpdateAppSettings │     into existing appsettings.json
    │  (key?,iss?,aud?)  │     (real values if --no-user-secrets,
    └─────────┬───────────┘      placeholder if User Secrets)
              ▼
    ┌─────────────────────┐
    │  TemplateInstaller  │  ← Creates:
    │  .InstallTemplates  │     Configuration/JwtSettings.cs
    │                     │     Services/JwtService.cs
    └─────────┬───────────┘
              ▼
    ┌─────────────────────┐
    │  ProgramEditor      │  ← Injects into Program.cs:
    │  .UpdateProgramAsync│     - usings for .Configuration and .Services
    │                     │     - AddAuthentication + AddJwtBearer
    │                     │     - Configure<JwtSettings>
    │                     │     - AddScoped<JwtService>
    │                     │     - app.UseAuthentication/Authorization
    └─────────┬───────────┘
              ▼
    ┌─────────────────────┐
    │  UserSecretsManager  │  ← (only if NOT --no-user-secrets)
    │  .ConfigureAsync    │     dotnet user-secrets init
    │                     │     set Jwt:SecretKey
    │                     │     set Jwt:Issuer
    │                     │     set Jwt:Audience
    └─────────┬───────────┘
              ▼
    ✓ Installation completed successfully

Possible errors

ProjectDetector

JsonEditor

JwtInstaller

UserSecretsManager

Runtime errors (in the generated project, NOT in the tool)

Exit code

• 0 → success
• 1 → any error (message and exception are logged)

Requirements

• .NET 10 SDK or later
• An ASP.NET Core Web API project targeting net10.0