Namespace Stratara.Identity.AspNetCore.Authentication
Classes
- ApiKeyAuthenticationHandler
ASP.NET Core authentication handler for Stratara API keys — a standard scheme, so it composes with cookie/bearer schemes via
[Authorize(AuthenticationSchemes=...)]or the Stratara auth-scheme selector.
- ApiKeyAuthenticationOptions
Options for the Stratara API-key authentication scheme.
- ExternalLoginProvisioningContext
The facts a JIT external-login provisioning attempt is evaluated against — passed to the optional invitation gate so a host can accept or reject a first-time external sign-in based on a pending invitation, an allow-list, or any other policy.
- ExternalLoginProvisioningOptions
Options for the JIT external-login provisioning service. Every default encodes a security invariant, not a convenience — the safe behavior is on out of the box and must be deliberately relaxed.
- ExternalLoginProvisioningResult<TUser>
The outcome of a JIT external-login provisioning attempt, plus the resolved local account when one is available.
- StrataraAuthSchemeSelectorOptions
Options for the Stratara auth-scheme selector — the policy scheme that routes each request to the matching authentication scheme by shape: API-key header present → API-key scheme;
Authorization: Bearer→ bearer scheme; everything else → the fallback (cookie) scheme.
- StrataraJwtBearerOptions
Bindable configuration for the Stratara JWT-bearer helper — validating access tokens on API requests (the machine/service-to-service and SPA/mobile counterpart to the interactive OpenID Connect flow). Bound from a configuration section (default
Identity:JwtBearer) and applied to the ASP.NET CoreJwtBearerhandler by AddStrataraJwtBearer(AuthenticationBuilder, IConfiguration, string, string).
- StrataraOpenIdConnectOptions
Bindable configuration for the Stratara OpenID Connect helper — the interactive "log in with <provider>" flow (Microsoft Entra, Keycloak, generic OIDC/Google). Bound from a configuration section (default
Identity:OpenIdConnect) and applied to the ASP.NET CoreOpenIdConnecthandler by AddStrataraOpenIdConnect(AuthenticationBuilder, IConfiguration, string, string).
Enums
- ExternalLoginProvisioningOutcome
The result category of a JIT external-login provisioning attempt. The three success outcomes (SignedInExisting, Linked, Provisioned) yield a local account to sign in; the two others require the caller to stop and prompt the user.