Add secure authentication to your app in minutes. Open-source, self-hosted, no vendor lock-in.
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddCoreIdent(o => {
o.Issuer = "https://auth.example.com";
o.Audience = "https://api.example.com";
});
builder.Services.AddSigningKey(o => o.UseRsa("key.pem"));
var app = builder.Build();
app.MapCoreIdentEndpoints();
app.Run();
That's it. Token issuance, OIDC discovery, JWKS — ready to go.
Authorization Code + PKCE, client credentials, refresh tokens, discovery, JWKS, revocation, introspection.
Email magic links, passkeys/WebAuthn, and SMS OTP built-in. Modern auth without password headaches.
In-memory for development, EF Core for production. Swap stores without changing your code.
RS256/ES256 signing, refresh token rotation, theft detection. No insecure defaults.
Passwordless login via secure email tokens. Pluggable email provider interface.
Modern biometric and hardware key authentication. Built on FIDO2 standards.
One-time passwords via SMS. Pluggable SMS provider for Twilio, AWS SNS, etc.
Built-in metrics via System.Diagnostics.Metrics. Track token issuance, auth durations, and more.
dotnet coreident for project init, key generation, client management, and migrations.
Health checks, distributed tracing, and service defaults for .NET Aspire apps.
CoreIdent 1.0 — Production-ready OAuth/OIDC foundation for .NET 10+
Join the CoreIdent community on GitHub.
Start with the Developer Guide (current codebase), then the planning documents for roadmap and intent: