Nixon.Extensions.OpenIddict.EntityFrameworkCore 10.0.5

Nixon.Extensions.OpenIddict

Opinionated extensions for building OpenIddict servers/clients and EF Core models with less boilerplate.

Packages

Package	Version
Nixon.Extensions.OpenIddict.EntityFrameworkCore
Nixon.Extensions.OpenIddict

What is thiss?

• Opinionated server/client setup via AddOpinionatedServer(...) and AddOpinionatedClient(...).
• Built-in development cert fallback when explicit signing/encryption keys are not configured.
• Helpers for OpenIddict application registration at startup.
• EF Core helpers to configure OpenIddict tables/schema consistently.
• Small utility extensions for request parsing and descriptor composition.

Install

dotnet add package Nixon.Extensions.OpenIddict
dotnet add package Nixon.Extensions.OpenIddict.EntityFrameworkCore

Install only the package(s) you need.

Quick start

1) Configure EF Core + OpenIddict model

using Microsoft.EntityFrameworkCore;
using Nixon.Extensions.OpenIddict.EntityFrameworkCore;

public sealed class AppDbContext(DbContextOptions<AppDbContext> options) : DbContext(options)
{
    protected override void OnModelCreating(ModelBuilder modelBuilder)
    {
        modelBuilder.UseOpenIddict();
        
        // Places OpenIddict entities in a dedicated schema.
        modelBuilder.ConfigureOpenIddict("openiddict");
    }
}

2) Configure OpenIddict services

using Nixon.Extensions.OpenIddict;

builder.Services.AddOpenIddict()
    .AddCore(core =>
    {
        core.UseEntityFrameworkCore<AppDbContext>();
    })
    .AddOpinionatedServer(builder.Environment, server =>
    {
        server.SetIssuer("http://localhost:5000");
    
        server.AllowCustomFlow("test-grant-type");
        server.AddScopedTokenRequestHandler<TestGrantTypeHandler>();
    
        server.AddApplication(new OpenIddictApplicationRegistration
        {
            ClientId = "client-id",
            AllowedGrantTypes = { "test-grant-type" }
        });
    })
    .AddOpinionatedClient(builder.Environment);

Opinionated defaults

AddOpinionatedServer(...) configures these defaults:

• Adds development signing/encryption certificates when missing.
• Uses data protection and reference access tokens.
• Access token lifetime: 1 hour.
• Enables: authorization code, refresh token (14 days), token exchange flows.
• Endpoint URIs:
  • connect/token
  • connect/userinfo
  • connect/authorize
• ASP.NET Core passthrough for authorization and userinfo endpoints.
• Disables transport security requirement in Development

AddOpinionatedClient(...) configures these defaults:

• Adds development signing/encryption certificates when missing.
• Redirection endpoint URI: connect/redirect.
• Enables authorization code flow.
• Uses data protection, System.Net.Http, and ASP.NET Core integration.
• Disables transport security requirement in Development.

API highlights

• IServiceCollection.AddOpenIddictApplication(...)
  • Registers application(s) and creates/updates them on startup via hosted service.
• IOpenIddictApplicationManager.CreateOrUpdateAsync(...)
  • Upsert helper by ClientId.
• OpenIddictServerBuilder.AllowRefreshTokenFlow(TimeSpan)
  • Flow + lifetime in one call.
• OpenIddictServerBuilder.AllowCustomFlows(IEnumerable<string>)
  • Bulk custom flow registration.
• OpenIddictRequest.TryGetParameter<T>(...)
  • Typed parameter parsing from token/authorization requests.
• OpenIddictApplicationDescriptor extensions
  • Add grant-type permissions and redirect URIs from collections.
• ModelBuilder.ConfigureOpenIddict(...)
  • Configure schema/table names for OpenIddict entities (default or generic entity types).

Samples

See src/Samples/Nixon.Extensions.OpenIddict.Samples.Alpha for a runnable reference setup.

License

MIT. See LICENSE.txt.