v1.1.1

CodeQL static analysis, a README overhaul, and a real PII-in-logs fix — no breaking API changes.

Added

• CodeQL static analysis (.github/workflows/codeql.yml), analyzing csharp via GitHub's
  Advanced Setup, independent of SonarQube Cloud. Runs on push to main/release/**, on
  PRs, weekly on a schedule, and via workflow_dispatch.

Changed

• README restructured — a live-demo callout, a grouped feature list, a MapIdentityApi
  compatibility note (verified against ASP.NET Core Identity source), a
  providers-at-a-glance table, and a package-ecosystem table. Full per-provider
  configuration moved to docs/CONFIGURATION.md.

Fixed

• Recipient email addresses and phone numbers are now masked before being logged, and no
  longer appear in exception messages thrown on send failure. Debug-level logging no
  longer includes the email/SMS message body or subject line. MaskPhone always masks,
  even for short input. Closes CodeQL's cs/exposure-of-sensitive-information findings
  from the first scan. Masking is currently hardcoded; making it configurable is tracked
  in #18.

Install

dotnet add package DGates.Identity.NotificationProviders --version 1.1.1

v1.1.0

SonarQube Cloud static analysis and CI/tooling improvements — no API changes.

Added

• SonarQube Cloud static analysis wired into CI's build-and-test job via
  dotnet-sonarscanner, gated on the quality gate result, with coverage
  (dotnet test --collect:"XPlat Code Coverage" across both unit and integration test runs)
  fed into the scan.
• SonarAnalyzer.CSharp as a build-time Roslyn analyzer (PrivateAssets=all, never flows to
  consumers).

Fixed

• NuGet/login@v1 pinned to a commit SHA (SonarQube Cloud finding).
• SendEmailAsync parameter names in SmtpEmailSender, SendGridEmailSender,
  PostMarkEmailSender, and OverrideRecipientEmailSender now match the IEmailSender
  interface declaration, and interpolated-string logging calls across the email and SMS
  senders now use structured/parameterized logging. The parameter renames are source-level
  only — they affect direct-named-argument callers of the concrete classes, not
  interface-typed consumers or binary compatibility — so this is not a breaking change.

Install

dotnet add package DGates.Identity.NotificationProviders --version 1.1.0

v1.0.0

First stable release of DGates.Identity.NotificationProviders.

Drop-in IEmailSender/ISmsSender providers for ASP.NET Core Identity — swap between SMTP,
SendGrid, Postmark, Twilio, or AWS SNS with a single DI registration, no other application code
changes.

1.0.0-beta.1 was validated by real consumption in angular-dotnet-auth-template, which now
depends on this package instead of its own local notification implementations — this stable
release re-points that dependency from the beta to 1.0.0.

Included

• IEmailSender: SMTP, SendGrid, Postmark — each with its own IOptions<T>, no cross-provider
  coupling
• ISmsSender (package-defined, not a stock ASP.NET Core Identity contract): Twilio, AWS SNS —
  designed against both from the start so the interface isn't shaped around one vendor
• OverrideRecipient redirect support for every provider, implemented once per domain
• BaseUrlOverride/ServiceUrlOverride sandbox redirection for every provider
• Full local dev setup via prebuilt mock images from
  dgates-mock-servers — see
  docs/LOCAL_DEV.md
• Full unit + integration test coverage against real mock backends for all five providers

Install

dotnet add package DGates.Identity.NotificationProviders --version 1.0.0

Changed since 1.0.0-beta.1

• No functional changes — this release exists to mark the API surface stable, following
  validation via real consumption in angular-dotnet-auth-template

v1.0.0-beta.1

First prerelease of DGates.Identity.NotificationProviders. All five providers are implemented
and passing their full unit + integration test suites against real mock backends (Mailpit,
twilio-mock, sendgrid-mock, postmark-mock, LocalStack SNS) — see dgates-mock-servers.

This beta exists to validate real-world consumption before tagging a stable v1.0.0: it's being
pulled into angular-dotnet-auth-template to replace that repo's local notification
implementations. If that integration surfaces any issues, they'll be addressed here before the
stable tag.

Included

• IEmailSender: SMTP, SendGrid, Postmark
• ISmsSender (package-defined): Twilio, AWS SNS
• OverrideRecipient redirect support for every provider
• BaseUrlOverride/ServiceUrlOverride sandbox redirection for every provider
• Full local dev setup via Docker mocks — see docs/LOCAL_DEV.md

Install

dotnet add package DGates.Identity.NotificationProviders --version 1.0.0-beta.1

(Prerelease versions require an explicit --version — dotnet add package without one will
skip prereleases by default.)

Feedback

This is a prerelease — API surface is believed final but not yet proven outside this repo's own
tests. Open an issue for anything that doesn't work as expected when consuming it.