Auth0 ASP.NET Core API Authentication

Welcome to the official documentation for the Auth0 ASP.NET Core API Authentication library.

This library simplifies the integration of Auth0 JWT authentication into your ASP.NET Core APIs by wrapping the standard JWT Bearer authentication with Auth0-specific configuration and validation.

Features

  • 🔐 Easy Auth0 Integration - Simple configuration with Auth0 Domain and Audience
  • 🛡️ DPoP Support - Full Demonstration of Proof-of-Possession (DPoP) implementation for enhanced token security
  • 🎯 JWT Bearer Authentication - Built on top of Microsoft's JWT Bearer authentication
  • ⚙️ Flexible Configuration - Full access to JWT Bearer options while maintaining Auth0 defaults
  • � Multiple Security Modes - Support for Bearer, DPoP-allowed, and DPoP-required modes
  • 📦 .NET 8 - Built for modern .NET applications

Quick Start

using Auth0.AspNetCore.Authentication.Api;

var builder = WebApplication.CreateBuilder(args);

// Add Auth0 API Authentication
builder.Services.AddAuth0ApiAuthentication(options =>
{
    options.Domain = builder.Configuration["Auth0:Domain"];
    options.JwtBearerOptions = new JwtBearerOptions()
    {
        Audience = builder.Configuration["Auth0:Audience"]
    };
});

var app = builder.Build();

app.UseAuthentication();
app.UseAuthorization();

app.MapGet("/api/protected", () => "Hello from protected endpoint!")
    .RequireAuthorization();

app.Run();

Configuration

Add the following to your appsettings.json:

{
  "Auth0": {
    "Domain": "your-tenant.auth0.com",
    "Audience": "https://your-api-identifier"
  }
}

Documentation Sections

Getting Started

DPoP (Proof-of-Possession)

Reference

Resources

License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.

Edit this page