SimpleAuth v0.1.0

🔐 SimpleAuth v0.1.0 — Initial Release

OAuth 2.1 + OpenID Connect authorization server for .NET 10.

Highlights

• Full OAuth 2.1 — Authorization Code + PKCE (S256 only), Client Credentials, Refresh Token with rotation
• OpenID Connect Core 1.0 — ID Tokens, UserInfo, Discovery, claims parameter (§5.5), prompt=login/none, max_age
• DPoP (RFC 9449) — Sender-constrained access tokens
• PAR (RFC 9126) — Pushed Authorization Requests
• Token Revocation (RFC 7009) + Introspection (RFC 7662)
• Native AOT compatible — zero reflection, source-generated JSON, ~15ms startup
• OIDF Conformance Suite — passing all required tests
• Minimal dependencies — BCL crypto + Microsoft.IdentityModel only
• In-memory + Entity Framework storage providers
• Extensible — IClaimsEnricher, IClientStore, ISigningKeyStore, and more

Install

dotnet add package SimpleAuth.Core

Quick Start

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddSimpleAuth(server =>
{
    server.Issuer = "https://auth.example.com";
    server.Keys.UseDevelopmentKey();
    server.Store.UseInMemory(store => { /* add clients */ });
});
var app = builder.Build();
app.MapSimpleAuth();
app.Run();