PouryaKit.Security.JwtBearer

JWT bearer authentication for a Host. It sets up ASP.NET Core's bearer scheme so each verified token names the Actor of the Operations it causes and, when the Host names a tenant claim and the token carries it, their tenant. The Kit issues no token: the issuer, audiences and signing keys are your identity provider's, in the Host's configuration.

InstallCopy Anchor Link

dotnet add package PouryaKit.Security.JwtBearer --prerelease

When to use itCopy Anchor Link

• Clients present bearer tokens from an identity provider.
• The Host must turn their verified claims into the Actor and tenant.

It builds on PouryaKit.Security, and PouryaKit.Web reads the claims it writes into the Operation Context.

Quick startCopy Anchor Link

Register it in the Host, naming the claim that holds the tenant, with authorization and the Web pipeline:

builder.Services.AddPouryaKitJwtBearer(claims => claims.TenantClaim = "tenant");
builder.Services.AddAuthorization();
builder.Services.AddPouryaKitWeb();

What you getCopy Anchor Link

• ASP.NET Core's own bearer scheme, with its token validation.
• An Actor, and a tenant where the token carries one, taken only from claims the scheme verified.
• Settings from the standard authentication configuration section, as any issuer is configured.

Learn moreCopy Anchor Link

• JWT bearer authentication
• Testing JWT bearer authentication
• Your first Host
• Operation Context