OpenIdAuthClient 1.0.0

OpenIdAuthClient

A .NET 8 client library for integrating with the OpenIdAuthServer OAuth 2.0 / OpenID Connect authorization server.

Features

• Authorization Code + PKCE flow - build authorization URLs, exchange codes for tokens, and refresh tokens securely.
• Cookie authentication - ready-made integration with Microsoft.AspNetCore.Authentication.Cookies.
• Scope-based authorization - includes [RequireScope] attribute, ScopePolicyProvider, and ScopeAuthorizationHandler for declarative scope checks.
• User info endpoint - fetch authenticated user claims from the authorization server.
• Strongly-typed configuration - bind settings from appsettings.json via AuthServerOptions.

Installation

dotnet add package OpenIdAuthClient

Quick Start

1. Configure appsettings.json

{
  "AuthServer": {
    "Authority": "https://your-auth-server.example.com",
    "ClientId": "my-client-id",
    "ClientSecret": "my-client-secret",
    "RedirectUri": "https://localhost:5001/auth/callback",
    "PostLogoutRedirectUri": "https://localhost:5001/",
    "Scopes": "openid profile email roles offline_access"
  }
}

2. Register services in Program.cs

using OpenIdAuthClient;

var builder = WebApplication.CreateBuilder(args);

// Bind options
builder.Services.Configure<AuthServerOptions>(
    builder.Configuration.GetSection(AuthServerOptions.SectionName));

// Register the typed HTTP client
builder.Services.AddHttpClient<AuthServerClient>();

// Add cookie authentication
builder.Services.AddAuthentication("Cookies")
    .AddCookie("Cookies");

// Add authorization
builder.Services.AddAuthorization();

var app = builder.Build();
app.UseAuthentication();
app.UseAuthorization();
app.Run();

3. Use the client

public class AuthController : Controller
{
    private readonly AuthServerClient _client;

    public AuthController(AuthServerClient client) => _client = client;

    public IActionResult Login()
    {
        var authUrl = _client.BuildAuthorizationUrl();
        // Store authUrl.CodeVerifier and authUrl.State in the session
        return Redirect(authUrl.Url);
    }
}

4. Protect endpoints with scopes

[RequireScope("admin")]
public IActionResult AdminDashboard() => View();

Configuration Reference

License

This project is licensed under the MIT License.