BarakoCMS.ExternalAuth
0.2.0
See the version list below for details.
dotnet add package BarakoCMS.ExternalAuth --version 0.2.0
NuGet\Install-Package BarakoCMS.ExternalAuth -Version 0.2.0
<PackageReference Include="BarakoCMS.ExternalAuth" Version="0.2.0" />
<PackageVersion Include="BarakoCMS.ExternalAuth" Version="0.2.0" />
<PackageReference Include="BarakoCMS.ExternalAuth" />
paket add BarakoCMS.ExternalAuth --version 0.2.0
#r "nuget: BarakoCMS.ExternalAuth, 0.2.0"
#:package BarakoCMS.ExternalAuth@0.2.0
#addin nuget:?package=BarakoCMS.ExternalAuth&version=0.2.0
#tool nuget:?package=BarakoCMS.ExternalAuth&version=0.2.0
<div align="center"> <img src="https://raw.githubusercontent.com/BaryoDev/barakoCMS/master/assets/icon.png" width="96" height="96" alt="BarakoCMS.ExternalAuth logo" /> <h1>BarakoCMS.ExternalAuth</h1> <p><em>Continue with Google, GitHub, Facebook or LinkedIn.</em></p> </div>
OAuth sign-in for barakoCMS. A user arriving through a provider is matched to a global user by verified email and issued exactly the same tenant-scoped, device-bound token as the built-in flows — social sign-in is another way in, not a second, weaker way in.
Enable it
builder.Services.AddBarakoCMS(builder.Configuration, modules =>
{
modules.Add(new BarakoCMS.ExternalAuth.ExternalAuthModule());
});
var app = builder.Build();
app.UseBarakoCMS();
Endpoints
| Method & path | Purpose |
|---|---|
GET /api/auth/providers |
Which providers are configured, for rendering buttons |
GET /api/auth/{provider}/start |
Begin the OAuth handshake |
GET /api/auth/{provider}/callback |
Provider redirect target |
GET /api/me/profile |
Profile details captured from the provider |
{provider} is google, github, facebook or linkedin. Only configured providers are
advertised or accepted.
Configuration
{
"ExternalAuth": {
"Google": { "ClientId": "...", "ClientSecret": "..." },
"GitHub": { "ClientId": "...", "ClientSecret": "..." }
}
}
Omit a provider to leave it disabled.
Security notes
- Matching is on a verified email only. Matching on an unverified one would let anyone who can claim an address at a provider take over the matching account.
- If the account has MFA enrolled, the provider callback issues an MFA challenge rather than a session token. Take 0.1.6 or later: earlier versions minted a token directly, so a provider-account takeover skipped the second factor entirely.
Part of barakoCMS
This is an optional module for barakoCMS, an open-source
headless CMS for .NET 8. Every module is published under the barakocms-module tag, so a single
search on nuget.org returns the whole set.
Contributions are welcome — including a module icon or other design work. See CONTRIBUTING.md.
Licensed under MPL-2.0.
If barakoCMS is useful to you, a star on the repository helps other people find it.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net8.0 is compatible. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 was computed. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 was computed. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net8.0
- AspNetCore.HealthChecks.Npgsql (>= 8.0.2)
- AspNetCore.HealthChecks.System (>= 9.0.0)
- AspNetCore.HealthChecks.UI (>= 8.0.2)
- AspNetCore.HealthChecks.UI.Client (>= 8.0.1)
- AspNetCore.HealthChecks.UI.InMemory.Storage (>= 8.0.1)
- BarakoCMS (>= 3.21.0)
- BCrypt.Net-Next (>= 4.2.0)
- FastEndpoints (>= 5.21.2)
- FastEndpoints.Security (>= 5.21.2)
- FastEndpoints.Swagger (>= 5.21.2)
- IdentityModel (>= 7.0.0)
- KubernetesClient (>= 18.0.13)
- Marten (>= 8.37.4)
- Microsoft.Extensions.Caching.Memory (>= 8.0.1)
- Microsoft.Extensions.Http.Resilience (>= 10.9.0)
- Microsoft.IdentityModel.JsonWebTokens (>= 8.22.0)
- Otp.NET (>= 1.4.1)
- prometheus-net.AspNetCore (>= 8.2.1)
- Serilog.AspNetCore (>= 10.0.0)
- Serilog.Sinks.Console (>= 6.1.1)
- Serilog.Sinks.File (>= 7.0.0)
- System.IdentityModel.Tokens.Jwt (>= 8.22.0)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 4.8.0 | 44 | 10/23/2026 |
| 4.7.0 | 81 | 10/20/2026 |
| 4.6.0 | 92 | 10/14/2026 |
| 4.5.0 | 79 | 10/12/2026 |
| 4.4.0 | 95 | 10/4/2026 |
| 4.3.1 | 105 | 9/29/2026 |
| 4.3.0 | 102 | 9/21/2026 |
| 4.2.1 | 114 | 9/18/2026 |
| 4.1.1 | 100 | 9/18/2026 |
| 4.0.0 | 110 | 9/7/2026 |
| 0.2.0 | 129 | 8/20/2026 |
| 0.1.8 | 132 | 8/16/2026 |
| 0.1.7 | 131 | 8/15/2026 |
| 0.1.6 | 190 | 8/8/2026 |
| 0.1.5 | 133 | 8/3/2026 |
| 0.1.4 | 137 | 7/22/2026 |
| 0.1.3 | 125 | 7/21/2026 |
| 0.1.2 | 101 | 7/17/2026 |
| 0.1.1 | 98 | 7/17/2026 |
| 0.1.0 | 106 | 7/16/2026 |