Openiddict Core

本项目是一个 .NET 身份栈与服务器框架，用于构建经过认证的 OpenID Connect 与 OAuth 2.0 身份提供商。它提供了签发与验证安全令牌，以及跨各种授权类型与协议流管理用户认证所需的核心逻辑。

该框架包含一个协议转换层，连接 OpenID Connect 与 SAML，以实现不同身份提供商间的互操作性。它还支持无状态运行模式，该模式移除了内置验证与存储，以允许对令牌与客户端验证进行手动控制。

该系统涵盖了广泛的能力，包括通过令牌验证中间件实现的 API 访问控制，以及针对桌面与移动应用的跨平台身份集成。它具备一个可自定义的请求处理流水线，带有用于存储身份数据与缓存授权请求的可插拔持久化提供商。

Features

OAuth 2.0 Authorization Servers - Implements a full OAuth 2.0 authorization server to manage client registrations and issue secure access tokens.
OAuth 2.0 and OIDC Token Issuance - Implements OAuth 2.0 and OpenID Connect specifications to generate and validate secure identity tokens.
Data Storage - Provides mechanisms to save identity and configuration data using various relational or document-based database engines.
Identity Data Persistence - Ships pluggable persistence providers for long-term storage of tokens and authorization data.
External Identity Provider Integration - Integrates applications with external identity providers to authenticate users and retrieve secure access tokens.
Identity and Access Management - Manages authentication and authorization flows using standard-compliant protocols for secure user access.
Identity Provider Connections - Links the application to third-party servers to authenticate users via external identity protocols.
Identity Providers - Links an application to external or internal servers to authenticate users via standard security protocols.
Identity Servers - Issues security tokens and validates user identities using standard protocols across various grant types and flows.
.NET Identity Stacks - Provides a flexible set of libraries for implementing secure authentication and authorization within the .NET ecosystem.
OAuth and OpenID Connect Libraries - Offers a toolkit for building certified identity providers that issue and validate security tokens using .NET.
OIDC Protocol Implementations - Executes the logic required to issue tokens and handle authorization requests as a certified OpenID Connect provider.
OpenID Connect Providers - Functions as a certified OpenID Connect identity provider that authenticates users and issues identity tokens.
API Access Control - Secures API endpoints by validating security tokens to ensure only authorized clients can access resources.
Custom Login Flows - Allows replacing default login flows with custom business logic and request interception within the identity pipeline.
Cross-Platform Identity Integration - Manages authentication callbacks and protocol activations for users logging into desktop and mobile applications.
Identity Protocol Translation - Provides a translation layer that bridges SAML and OpenID Connect to enable interoperability between different providers.
OIDC and SAML Bridging - Implements a protocol translation layer that enables interoperability between OpenID Connect and SAML identity providers.
OS-Level Authorization Handling - Manages authorization and logout processes on desktop and mobile platforms using protocol activations.
Pluggable Token Persistence - Abstracts token and client storage, allowing delegation to custom user-defined persistence providers.
Protocol Activation Management - Processes authentication callbacks through custom URI schemes or local web servers to return users to the application.
SAML and OIDC Protocol Bridging - Translates between SAML and OIDC protocols to ensure interoperability between different identity providers.
Token Validation - Ensures tokens in requests are scoped and validated correctly to prevent unauthorized access to protected resources.
API Token Validators - Verifies the authenticity and validity of incoming tokens to secure application programming interface endpoints.
Pushed Authorization Requests - Converts complex authorization requests into unique URIs stored in a database to simplify redirection flows.
Token Validation Middleware - Ships security layer middleware for verifying the authenticity and validity of access tokens to protect API endpoints.
Handler Interceptor Pipelines - Provides a pipeline of interceptors that allow replacing or rearranging default request processing steps.
Identity Pipeline Customization - Overrides default request processing by replacing or rearranging event handlers within the execution sequence.
Identity Request Interception - Captures authorization, logout, and token callbacks within the request pipeline for custom processing.
Request Interception Middleware - Implements architectural patterns for routing protocol callbacks through security and logging middleware.
Stateless Token Validation - Provides a stateless mode that removes built-in storage to allow for local, high-performance token verification.
Authentication and Authorization - OpenID Connect server implementation for ASP.NET Core.

Star 历史

openiddictopeniddict-core

Name: openiddict/openiddict-core
Author: openiddict

View on GitHub

5,168 星标589 分支C#Apache-2.08 次浏览openiddict.com

Openiddict Core

Features

OAuth 2.0 Authorization Servers - Implements a full OAuth 2.0 authorization server to manage client registrations and issue secure access tokens.
OAuth 2.0 and OIDC Token Issuance - Implements OAuth 2.0 and OpenID Connect specifications to generate and validate secure identity tokens.
Data Storage - Provides mechanisms to save identity and configuration data using various relational or document-based database engines.
Identity Data Persistence - Ships pluggable persistence providers for long-term storage of tokens and authorization data.
External Identity Provider Integration - Integrates applications with external identity providers to authenticate users and retrieve secure access tokens.
Identity and Access Management - Manages authentication and authorization flows using standard-compliant protocols for secure user access.
Identity Provider Connections - Links the application to third-party servers to authenticate users via external identity protocols.
Identity Providers - Links an application to external or internal servers to authenticate users via standard security protocols.
Identity Servers - Issues security tokens and validates user identities using standard protocols across various grant types and flows.
.NET Identity Stacks - Provides a flexible set of libraries for implementing secure authentication and authorization within the .NET ecosystem.
OAuth and OpenID Connect Libraries - Offers a toolkit for building certified identity providers that issue and validate security tokens using .NET.
OIDC Protocol Implementations - Executes the logic required to issue tokens and handle authorization requests as a certified OpenID Connect provider.
OpenID Connect Providers - Functions as a certified OpenID Connect identity provider that authenticates users and issues identity tokens.
API Access Control - Secures API endpoints by validating security tokens to ensure only authorized clients can access resources.
Custom Login Flows - Allows replacing default login flows with custom business logic and request interception within the identity pipeline.
Cross-Platform Identity Integration - Manages authentication callbacks and protocol activations for users logging into desktop and mobile applications.
Identity Protocol Translation - Provides a translation layer that bridges SAML and OpenID Connect to enable interoperability between different providers.
OIDC and SAML Bridging - Implements a protocol translation layer that enables interoperability between OpenID Connect and SAML identity providers.
OS-Level Authorization Handling - Manages authorization and logout processes on desktop and mobile platforms using protocol activations.
Pluggable Token Persistence - Abstracts token and client storage, allowing delegation to custom user-defined persistence providers.
Protocol Activation Management - Processes authentication callbacks through custom URI schemes or local web servers to return users to the application.
SAML and OIDC Protocol Bridging - Translates between SAML and OIDC protocols to ensure interoperability between different identity providers.
Token Validation - Ensures tokens in requests are scoped and validated correctly to prevent unauthorized access to protected resources.
API Token Validators - Verifies the authenticity and validity of incoming tokens to secure application programming interface endpoints.
Pushed Authorization Requests - Converts complex authorization requests into unique URIs stored in a database to simplify redirection flows.
Token Validation Middleware - Ships security layer middleware for verifying the authenticity and validity of access tokens to protect API endpoints.
Handler Interceptor Pipelines - Provides a pipeline of interceptors that allow replacing or rearranging default request processing steps.
Identity Pipeline Customization - Overrides default request processing by replacing or rearranging event handlers within the execution sequence.
Identity Request Interception - Captures authorization, logout, and token callbacks within the request pipeline for custom processing.
Request Interception Middleware - Implements architectural patterns for routing protocol callbacks through security and logging middleware.
Stateless Token Validation - Provides a stateless mode that removes built-in storage to allow for local, high-performance token verification.
Authentication and Authorization - OpenID Connect server implementation for ASP.NET Core.

Openiddict Core 的开源替代方案

相似的开源项目，按与 Openiddict Core 的功能重合度排序。

ory/hydra
ory/hydra
17,236在 GitHub 上查看
Hydra is a headless identity server that functions as a certified OAuth2 and OpenID Connect provider. It is designed as an authentication engine that manages authorization handshakes and token lifecycles while remaining decoupled from the user interface. The project distinguishes itself through a headless architecture, allowing external management of login and consent flows. It provides specialized capabilities for dynamic client registration, JSON Web Token issuance, and a system for rotating encryption secrets without service downtime. The system covers a broad range of identity operations
Go
在 GitHub 上查看17,236
lepture/authlib
lepture/authlib
5,346在 GitHub 上查看
Authlib is a comprehensive Python framework for implementing OAuth 1.0, OAuth 2.0, and OpenID Connect clients and servers. It provides a complete toolkit for identity management, spanning the development of authorization servers, resource servers, and client-side integrations. The library distinguishes itself through a full implementation of the JOSE specifications, including JSON Web Tokens, Encryption, Signatures, and Keys. It features specialized capabilities for non-interactive authentication via service account assertion frameworks and a compliance-correction layer designed to handle ide
Python
在 GitHub 上查看5,346
authlib/authlib
authlib/authlib
5,346在 GitHub 上查看
Authlib is a comprehensive Python library for building and integrating OAuth 1.0, OAuth 2.0, and OpenID Connect clients and servers. It provides a unified set of tools to manage authentication and authorization flows, allowing applications to either act as a client connecting to external identity providers or as a provider issuing tokens and managing user identities. The project distinguishes itself through a full implementation of the JOSE standards, offering a suite of cryptographic tools for generating, signing, encrypting, and validating JSON Web Tokens, Signatures, Encryption, and Keys.
Pythondjangoflaskjose
在 GitHub 上查看5,346
panva/node-oidc-provider
panva/node-oidc-provider
3,756在 GitHub 上查看
node-oidc-provider is a framework for building OpenID Certified authorization servers and identity providers within Node.js environments. It provides a comprehensive suite of tools for managing the full lifecycle of OAuth 2.0 and OpenID Connect services, including user authentication, client registration, and the issuance and validation of identity and access tokens. The project distinguishes itself through a highly modular architecture that allows developers to integrate authentication services directly into existing web application stacks. It supports advanced customization through a middle
JavaScriptauthorizationauthorization-serverconnect
在 GitHub 上查看3,756

查看 Openiddict Core 的所有 30 个替代方案

常见问题解答

openiddict/openiddict-core 是做什么的？

openiddict/openiddict-core 的主要功能有哪些？

openiddict/openiddict-core 的主要功能包括：OAuth 2.0 Authorization Servers, OAuth 2.0 and OIDC Token Issuance, Data Storage, Identity Data Persistence, External Identity Provider Integration, Identity and Access Management, Identity Provider Connections, Identity Providers。

openiddict/openiddict-core 有哪些开源替代品？

openiddict/openiddict-core 的开源替代品包括： ory/hydra — Hydra is a headless identity server that functions as a certified OAuth2 and OpenID Connect provider. It is designed… lepture/authlib — Authlib is a comprehensive Python framework for implementing OAuth 1.0, OAuth 2.0, and OpenID Connect clients and… authlib/authlib — Authlib is a comprehensive Python library for building and integrating OAuth 1.0, OAuth 2.0, and OpenID Connect… panva/node-oidc-provider — node-oidc-provider is a framework for building OpenID Certified authorization servers and identity providers within… doorkeeper-gem/doorkeeper — Doorkeeper is an OAuth 2 authorization server and provider for Ruby on Rails and Grape applications. It provides the… authorizerdev/authorizer — Authorizer is an open-source identity provider that functions as a centralized authentication and authorization…