DioRed.Dais.AspNetCore 1.0.0-preview.4

DioRed.Dais.AspNetCore

DioRed.Dais.AspNetCore provides seamless integration between ASP.NET Core applications and the DAIS (DioRed Authentication & Identity Server) OAuth2/OpenID-Connect–style authentication system.

It offers:

• Simple cookie-based login via DAIS Authorization Code + PKCE
• Automatic UserInfo → Claims mapping
• High-level and advanced configuration models
• Built-in login/logout endpoint helpers
• Support for multiple authentication schemes
• Full extensibility for custom OAuth options

🚀 Installation

dotnet add package DioRed.Dais.AspNetCore

✨ Quick Start

Register DAIS authentication in Program.cs:

builder.Services.AddDaisAuthentication(o =>
{
    o.ClientId     = "my-app";
    o.ClientSecret = "secret";
    o.Scopes       = new[] { "profile", "email" };
});

Add login/logout endpoints:

app.MapDaisAuthEndpoints();

Protect your pages:

app.MapGet("/profile", (ClaimsPrincipal user) =>
{
    return $"Hello, {user.Identity?.Name}";
}).RequireAuthorization();

🔧 Advanced Configuration

If you need full control over cookie scheme names, the authentication pipeline, or the underlying OAuth handler:

builder.AddDais(o =>
{
    o.CookieScheme = "MyCookies";
    o.DaisScheme   = "MyDais";

    o.ConfigureDais = dais =>
    {
        dais.ClientId  = "my-app";
        dais.Scopes    = new[] { "profile", "email" };
    };

    o.ConfigureDaisOAuth = oauth =>
    {
        oauth.SignInScheme = "MyCookies";
        oauth.Scope.Add("custom-scope");
    };
});

📡 UserInfo → Claims Mapping

DAIS automatically fetches the UserInfo document and maps its fields to claims:

• "name" → ClaimTypes.Name
• "sub" → ClaimTypes.NameIdentifier
• "preferred_username" → "preferred_username"
• All other JSON fields → raw claim names via MapAll()

This ensures HttpContext.User.Identity.Name works as expected.

🧩 Login/Logout Endpoints Helper

Add standardized endpoints:

app.MapDaisAuthEndpoints();

Customize paths/schemes if needed:

app.MapDaisAuthEndpoints(
    loginPath: "/auth/login",
    logoutPath: "/auth/logout",
    cookieScheme: "MyCookies",
    challengeScheme: "MyDais"
);

📚 Summary

DioRed.Dais.AspNetCore gives you a clean, production-ready, extensible way to plug DAIS authentication into any ASP.NET Core application, from minimal APIs to MVC to Razor Pages.

If you need programmatic DAIS access using client_credentials, check out the companion package:

👉 DioRed.Dais.Client