Skip to content

SAIF.NetCore.AuthService API reference

This page lists all public types exposed by SAIF.NetCore.AuthService. Each type links to its full API reference page.

Types

Type Kind Namespace Purpose
AuthenticationServiceExtensions Class SAIF.NetCore.Services.Authentication.Extensions Register identity-service implementations (AddTokenIdentityService, AddWinIdentityService, AddIdentityAccessor) and the Security API/token clients they depend on.
BaseIdentityService Class SAIF.NetCore.Services.Authentication.Identity Expose the current ClaimsIdentity/ClaimsPrincipal/claims and an IsAuthenticated flag derived from the current HttpContext's user.
ConfigureJwtBearerOptions Class SAIF.NetCore.Services.Authentication Populate Authority, Audience, and RequireHttpsMetadata on JwtBearerOptions from the oauth settings section via the injected IEnvironmentClient (BR-AUTH-001).
IAccessTokenClient Interface SAIF.NetCore.Services.Authentication.Interfaces Expose the configuration needed to request a client-credentials token (TokenUrl, ClientId, ClientSecret, GrantType, Scopes) as settable properties.
ISecurityClient Interface SAIF.NetCore.Services.Authentication.Interfaces Declare the full set of remote Security API operations consumed by identity services and the declarative authorization pipeline.
IdentityServiceAccessor Class SAIF.NetCore.Services.Authentication.Identity Resolve the single registered IIdentityService from IServiceProvider on demand, with no scheme-switching logic.
MultiIdentityServiceAccessor Class SAIF.NetCore.Services.Authentication.Identity Select between TokenIdentityService and WinIdentityService per request, based on AuthenticationSchemeSelector(HttpContext) (BR-AUTH-015).
OktaToken Class SAIF.NetCore.Services.Authentication.Clients Hold the deserialized token-endpoint response fields (access_token, expires_in, scope, token_type).
OktaTokenClient Class SAIF.NetCore.Services.Authentication.Clients Cache and reuse a previously acquired access token until it is near expiry (BR-AUTH-017).
SecurityApiAuthorize Class SAIF.NetCore.Services.Authorization Translate a role list into the dynamic policy name "SecurityAPI.{roles}" recognized by SecurityApiPolicy (BR-AUTH-004).
SecurityApiHandler Class SAIF.NetCore.Services.Authorization Deny (by omission) any identity whose Identity.Name is null or whitespace, without calling the remote Security API — an empty-name guard, not an authentication check (BR-AUTH-006).
SecurityApiPolicy Class SAIF.NetCore.Services.Authorization Recognize policy names starting with "SecurityAPI" (current-culture, case-sensitive comparison via the single-argument StartsWith(string) overload, not ordinal) and build a policy with a SecurityApiRequirement whose roles are the text after the first . (BR-AUTH-005).
SecurityApiRequirement Class SAIF.NetCore.Services.Authorization Carry the comma-separated role list a SecurityApiHandler must check against the remote Security API.
SecurityClient Class SAIF.NetCore.Services.Authentication.Clients Implement every ISecurityClient member by issuing a GET request to its endpoint-specific route under /v1/ (for example /v1/Users/GetUser/{userId} or /v1/Users/IsAuthorized/{userId}/{role}) and deserializing the response.
SecurityClientException Class SAIF.NetCore.Services.Authentication.Clients Represent a failed remote Security API call as a typed, catchable exception distinct from other SAIFException-derived errors.
SecurityClientKeys Class SAIF.NetCore.Services.Authentication.Clients Centralize the SecurityClient settings-section name and its two setting-key names as public constants.
TokenIdentityService Class SAIF.NetCore.Services.Authentication.Identity Resolve UserId from the first claim whose type contains mailid (case-insensitive) (BR-AUTH-012).
WinIdentityService Class SAIF.NetCore.Services.Authentication.Identity Resolve UserId as the full domain-qualified Identity.Name (domain retained) (BR-AUTH-014).

Sources

  • src/SAIF.NetCore.AuthService/SAIF.NetCore.AuthService/SAIF.NetCore.AuthService/SAIF.NetCore.AuthService.csproj