Cirreum.Runtime.Client.Oidc 1.0.4

Cirreum.Runtime.Client.Oidc

OIDC authentication for Blazor WebAssembly applications in the Cirreum ecosystem

Overview

Cirreum.Runtime.Client.Oidc provides OpenID Connect (OIDC) authentication support for Blazor WebAssembly applications built on the Cirreum framework. It extends Microsoft's WebAssembly authentication with enhanced claims handling, session monitoring, and application user management.

Features

• OIDC Authentication - Full OpenID Connect support for Blazor WebAssembly applications
• Enhanced Claims Processing - Custom claims principal factory with JWT token parsing and role mapping
• Session Monitoring - Built-in support for user activity tracking and session timeout management
• Application User Integration - Seamless integration with custom application user types and loaders
• Authorization Policies - Pre-configured standard authorization policies (Standard, Internal, Agent, Manager, Admin)
• Fluent Configuration API - Intuitive builder pattern for authentication setup

Installation

dotnet add package Cirreum.Runtime.Client.Oidc

Usage

Basic Setup

builder.AddOidcAuth(options =>
{
    options.Authority = "https://your-identity-provider.com";
    options.ClientId = "your-client-id";
    options.ResponseType = "code";
    options.DefaultScopes.Add("openid");
    options.DefaultScopes.Add("profile");
});

With Custom Claims Extender

builder.AddOidcAuth<MyCustomClaimsExtender>(options =>
{
    options.Authority = "https://your-identity-provider.com";
    options.ClientId = "your-client-id";
});

Adding Session Monitoring

builder.AddOidcAuth(options => { /* ... */ })
    .AddSessionMonitoring(sessionOptions =>
    {
        sessionOptions.IdleTimeout = TimeSpan.FromMinutes(30);
        sessionOptions.SessionTimeout = TimeSpan.FromHours(8);
    });

Adding Application User Support

builder.AddOidcAuth(options => { /* ... */ })
    .AddApplicationUser<MyApplicationUser, MyApplicationUserLoader>();

Architecture

The library is built on top of:

• Cirreum.Runtime.Client - Core client runtime functionality
• Microsoft.AspNetCore.Components.WebAssembly.Authentication - Microsoft's Blazor WASM authentication
• Microsoft.IdentityModel.JsonWebTokens - JWT token handling

Contribution Guidelines

1. Be conservative with new abstractions
   The API surface must remain stable and meaningful.

2. Limit dependency expansion
   Only add foundational, version-stable dependencies.

3. Favor additive, non-breaking changes
   Breaking changes ripple through the entire ecosystem.

4. Include thorough unit tests
   All primitives and patterns should be independently testable.

5. Document architectural decisions
   Context and reasoning should be clear for future maintainers.

6. Follow .NET conventions
   Use established patterns from Microsoft.Extensions.* libraries.

Versioning

Cirreum.Runtime.Client.Oidc follows Semantic Versioning:

• Major - Breaking API changes
• Minor - New features, backward compatible
• Patch - Bug fixes, backward compatible

Given its foundational role, major version bumps are rare and carefully considered.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Cirreum Foundation Framework
Layered simplicity for modern .NET