OpsFusion.IdentitySync 9.0.0

OpsFusion.IdentitySync

Reusable identity permissions/screens sync package for ASP.NET Core APIs.

What this package gives you

• Permission + screen sync orchestration
• HTTP sync client to Identity Platform
• File-based manifest reader
• Background recycle sync hosted service
• Startup force-sync helper
• Reusable sync API endpoint: POST api/v1/identity-sync

1. Install package

If using project reference:

• Reference OpsFusion.IdentitySync project/package in your API.

If using NuGet package:

dotnet add package OpsFusion.IdentitySync --version 9.0.0

2. Register services (one line)

In Program.cs:

using OpsFusion.IdentitySync;

builder.Services.AddControllers();
builder.Services.AddOpsFusionIdentitySync(builder.Configuration);

3. Add required authorization policy

The built-in controller uses policy: OpsFusion.IdentitySync.Execute.

You must define this policy in your auth setup. Example:

builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("OpsFusion.IdentitySync.Execute", policy =>
        policy.RequireAuthenticatedUser()
              .RequireClaim("permission", "OpsFusion.IdentitySync.Execute"));
});

If your permission claim type is different, update RequireClaim(...) accordingly.

4. Required appsettings configuration

Add this section in your appsettings.json:

{
  "IdentitySync": {
    "Enabled": true,
    "BaseUrl": "https://your-identity-platform/",
    "PermissionsSyncPath": "api/v1/permissions/sync",
    "ScreensSyncPath": "api/v1/permissions/screens/sync",
    "PermissionsManifestPath": "Resources/opsfusion-permissions.json",
    "ScreensManifestPath": "Resources/opsfusion-screens.json",
    "RecycleIntervalMinutes": 60,
    "ForceSyncOnStartup": true,
    "FailStartupIfInitialSyncFails": false
  }
}

5. Manifest files

Ensure these files exist in your API output (copy to output/publish):

• Resources/opsfusion-permissions.json
• Resources/opsfusion-screens.json

FileIdentityManifestReader resolves paths from:

1. absolute path (if provided)
2. AppContext.BaseDirectory
3. app content root

6. Trigger sync API

Endpoint exposed by package controller:

• POST /api/v1/identity-sync

Requires authenticated user with permission policy OpsFusion.IdentitySync.Execute.

7. Optional startup force-sync

If you want initial sync on startup:

var app = builder.Build();
await app.ForceIdentityManifestSyncAsync();

Minimal integration checklist

• Add package reference
• Call AddOpsFusionIdentitySync(configuration)
• Add policy OpsFusion.IdentitySync.Execute
• Add IdentitySync config section
• Ensure manifest JSON files exist

Notes

• Default route is api/v1/identity-sync.
• Default success response body:

{ "success": true, "message": "Permissions and screens synced successfully." }