Skip to content

AuthEndpoints 3.0.0

Choose a tag to compare

View all tags
@cursor cursor released this 27 Aug 05:28
v3.0.0
7911d26
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.0 is the first stable GA of the rewritten Identity auth stack. Last feature work shipped in 3.0.0-rc.4 (pluggable passkey sign-in); this cut is version and docs only.

Highlights

  • Opinionated facade: AddAuthEndpoints / UseAuthEndpoints / MapAuthEndpoints (cookie Identity + passkeys by default; JWT opt-in)
  • Sign-in stacks you choose: cookie sessions, Identity bearer tokens, or Simple JWT (hashed refresh tokens, production issuer/audience/key validation)
  • Passkeys (WebAuthn) for passwordless register and login, including pluggable IPasskeySignInCompleter<TUser> (IdentityPasskeySignInCompleter and JwtPasskeySignInCompleter)
  • 2FA and account lifecycle: register, confirm email, forgot/reset password, manage info
  • Step-up ReAuth for sensitive manage and passkey mutations
  • Roles-aware AddAuthEndpoints<TUser, TRole, TContext> so Identity IRoleStore registers correctly
  • .NET 10 (net10.0)

Install

dotnet add package AuthEndpoints

Packages

  • AuthEndpoints 3.0.0
  • AuthEndpoints.External.OAuth remains a separate preview package (3.0.0-preview.3, retargeted at this core)

Full Changelog: v3.0.0-rc.4...v3.0.0

Assets 2
Loading