openiddict/openiddict-core
Openiddict Core
This project is a .NET identity stack and server framework used to build certified OpenID Connect and OAuth 2.0 identity providers. It provides the core logic required to issue and validate security tokens and manage user authentication across various grant types and protocol flows.
The framework includes a protocol translation layer that bridges OpenID Connect and SAML to enable interoperability between different identity providers. It also supports a stateless mode of operation, which removes built-in validation and storage to allow for manual control over token and client verification.
The system covers a broad range of capabilities, including API access control through token validation middleware and cross-platform identity integration for desktop and mobile applications. It features a customizable request processing pipeline with pluggable persistence providers for storing identity data and caching authorization requests.
Features
- OAuth 2.0 Authorization Servers - Implements a full OAuth 2.0 authorization server to manage client registrations and issue secure access tokens.
- OAuth 2.0 and OIDC Token Issuance - Implements OAuth 2.0 and OpenID Connect specifications to generate and validate secure identity tokens.
- Data Storage - Provides mechanisms to save identity and configuration data using various relational or document-based database engines.
- Identity Data Persistence - Ships pluggable persistence providers for long-term storage of tokens and authorization data.
- External Identity Provider Integration - Integrates applications with external identity providers to authenticate users and retrieve secure access tokens.
- Identity and Access Management - Manages authentication and authorization flows using standard-compliant protocols for secure user access.
- Identity Provider Connections - Links the application to third-party servers to authenticate users via external identity protocols.
- Identity Providers - Links an application to external or internal servers to authenticate users via standard security protocols.
- Identity Servers - Issues security tokens and validates user identities using standard protocols across various grant types and flows.
- .NET Identity Stacks - Provides a flexible set of libraries for implementing secure authentication and authorization within the .NET ecosystem.
- OAuth and OpenID Connect Libraries - Offers a toolkit for building certified identity providers that issue and validate security tokens using .NET.
- OIDC Protocol Implementations - Executes the logic required to issue tokens and handle authorization requests as a certified OpenID Connect provider.
- OpenID Connect Providers - Functions as a certified OpenID Connect identity provider that authenticates users and issues identity tokens.
- API Access Control - Secures API endpoints by validating security tokens to ensure only authorized clients can access resources.
- Custom Login Flows - Allows replacing default login flows with custom business logic and request interception within the identity pipeline.
- Cross-Platform Identity Integration - Manages authentication callbacks and protocol activations for users logging into desktop and mobile applications.
- Identity Protocol Translation - Provides a translation layer that bridges SAML and OpenID Connect to enable interoperability between different providers.
- OIDC and SAML Bridging - Implements a protocol translation layer that enables interoperability between OpenID Connect and SAML identity providers.
- OS-Level Authorization Handling - Manages authorization and logout processes on desktop and mobile platforms using protocol activations.
- Pluggable Token Persistence - Abstracts token and client storage, allowing delegation to custom user-defined persistence providers.
- Protocol Activation Management - Processes authentication callbacks through custom URI schemes or local web servers to return users to the application.
- SAML and OIDC Protocol Bridging - Translates between SAML and OIDC protocols to ensure interoperability between different identity providers.
- Token Validation - Ensures tokens in requests are scoped and validated correctly to prevent unauthorized access to protected resources.
- API Token Validators - Verifies the authenticity and validity of incoming tokens to secure application programming interface endpoints.
- Pushed Authorization Requests - Converts complex authorization requests into unique URIs stored in a database to simplify redirection flows.
- Token Validation Middleware - Ships security layer middleware for verifying the authenticity and validity of access tokens to protect API endpoints.
- Handler Interceptor Pipelines - Provides a pipeline of interceptors that allow replacing or rearranging default request processing steps.
- Identity Pipeline Customization - Overrides default request processing by replacing or rearranging event handlers within the execution sequence.
- Identity Request Interception - Captures authorization, logout, and token callbacks within the request pipeline for custom processing.
- Request Interception Middleware - Implements architectural patterns for routing protocol callbacks through security and logging middleware.
- Stateless Token Validation - Provides a stateless mode that removes built-in storage to allow for local, high-performance token verification.
- Authentication and Authorization - OpenID Connect server implementation for ASP.NET Core.
