Corely.IAM

Host-agnostic, multi-tenant identity and access management for .NET applications. Drop-in authentication, authorization, RBAC, and permission management — no external service dependencies.

graph LR
    subgraph Host App
        A[IAMOptions.Create] --> B[AddIAMServices]
    end
    B --> C[IRegistrationService]
    B --> D[IAuthenticationService]
    B --> E[IRetrievalService]
    B --> F[IModificationService]
    B --> G[IMfaService]
    C & D & E & F & G --> H[Processors]
    H --> I[Repositories]
    I --> J[(Database)]

    style A fill:#4a9eff,color:#fff
    style B fill:#4a9eff,color:#fff
    style C fill:#2ecc71,color:#fff
    style D fill:#2ecc71,color:#fff
    style E fill:#2ecc71,color:#fff
    style F fill:#2ecc71,color:#fff
    style G fill:#2ecc71,color:#fff
    style H fill:#f39c12,color:#fff
    style I fill:#e74c3c,color:#fff
    style J fill:#9b59b6,color:#fff

Loading

Highlights

• Multi-tenant accounts — users belong to multiple accounts with scoped RBAC
• CRUDX permissions — fine-grained Create / Read / Update / Delete / Execute per resource type
• Token-based auth — JWT with custom claims, no HttpContext dependency
• Multi-factor authentication — TOTP (authenticator apps) with recovery codes
• Google Sign-In — link Google accounts as an alternative auth method
• Invitation system — token-based onboarding with expiry and revocation
• Per-entity encryption — account and user-scoped key pairs, stored encrypted
• Pluggable crypto — configure algorithms via the IAMOptions builder
• Three database providers — SQL Server, MySQL, MariaDB via EF Core

Quick Start

// Register services
var options = IAMOptions.Create(configuration, securityConfigProvider, efConfigFactory);
services.AddIAMServices(options);

// Register a user and account
var registrationService = serviceProvider.GetRequiredService<IRegistrationService>();

var userResult = await registrationService.RegisterUserAsync(
    new RegisterUserRequest("admin", "admin@example.com", "P@ssw0rd!"));

var accountResult = await registrationService.RegisterAccountAsync(
    new RegisterAccountRequest("My Organization"));

Documentation

Docs	Description
Corely.IAM	Core library — setup, services, domains, security, architecture
Corely.IAM.Web	Pre-built Blazor UI — auth pages, account management, RBAC visualization
DevTools CLI	Crypto operations and IAM service interaction from the command line
Migration CLI	Database creation, migrations, and scripting

Solution Structure

Project	Purpose
Corely.IAM	Core library — business logic, data access, security
Corely.IAM.Web	Blazor Server UI — pages, components, auth flow
Corely.IAM.WebApp	Host application (reference implementation)
Corely.IAM.UnitTests	Test suite (xUnit, Moq, AutoFixture, FluentAssertions)
Corely.IAM.DevTools	Developer CLI for crypto and IAM operations
Corely.IAM.DataAccessMigrations.*	EF Core migrations per database provider

License

See LICENSE for details.