auth.io 

Extension library for integrating the Authio user validation and management system.

The Authio client for .NET without any ASP.NET Core dependency: discovery, every token grant Authio supports (client credentials, authorization code, refresh, token exchange, connected accounts, device), client... More information

Protect an ASP.NET Core API with Authio: JWT bearer validation from the realm's discovery document, optional introspection (active check or opaque tokens), flattened Authio roles and permissions, scope / role /... More information

Backend-for-Frontend for Authio: lets a browser SPA (React, Angular, Vue...) sign in with Authio without ever holding a token. Cookie + OpenID Connect (code flow, PKCE, RFC 9207 iss check), server-side... More information

Protects an ASP.NET Core MCP server (OAuth 2.1 resource server) with Authio, on top of Authio.AspNetCore: JWT, JWE and opaque token validation, RFC 9728 protected resource metadata and the MCP-ready... More information

Test an application that uses Authio without an Authio server: an in-memory fake Authio served through an HttpMessageHandler (discovery, JWKS, the authorization endpoint with PKCE and web_message, every token... More information