Complete OAuth/OIDC for .NET 10+

Add secure authentication to your app in minutes. Open-source, self-hosted, no vendor lock-in.

MIT License .NET 10 GitHub Stars
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddCoreIdent(o => {
    o.Issuer = "https://auth.example.com";
    o.Audience = "https://api.example.com";
});
builder.Services.AddSigningKey(o => o.UseRsa("key.pem"));

var app = builder.Build();
app.MapCoreIdentEndpoints();
app.Run();

That's it. Token issuance, OIDC discovery, JWKS — ready to go.

🔐

Full OAuth 2.0 / OIDC

Authorization Code + PKCE, client credentials, refresh tokens, discovery, JWKS, revocation, introspection.

🔑

Passwordless-First

Email magic links, passkeys/WebAuthn, and SMS OTP built-in. Modern auth without password headaches.

🧩

Flexible Storage

In-memory for development, EF Core for production. Swap stores without changing your code.

🛡️

Secure by Default

RS256/ES256 signing, refresh token rotation, theft detection. No insecure defaults.

What's Included

✉️

Email Magic Links

Passwordless login via secure email tokens. Pluggable email provider interface.

🔐

Passkeys / WebAuthn

Modern biometric and hardware key authentication. Built on FIDO2 standards.

📱

SMS OTP

One-time passwords via SMS. Pluggable SMS provider for Twilio, AWS SNS, etc.

📊

OpenTelemetry Metrics

Built-in metrics via System.Diagnostics.Metrics. Track token issuance, auth durations, and more.

🛠️

CLI Tool

dotnet coreident for project init, key generation, client management, and migrations.

☁️

Aspire Integration

Health checks, distributed tracing, and service defaults for .NET Aspire apps.

Implementation Status

CoreIdent 1.0 — Production-ready OAuth/OIDC foundation for .NET 10+

View Full Roadmap

Open for Your Contribution

Join the CoreIdent community on GitHub.
GitHub Stars NuGet Downloads

Documentation

Start with the Developer Guide (current codebase), then the planning documents for roadmap and intent:

View on GitHub