IronAlpine.Security.Authorization.EFCore
2.0.0
dotnet add package IronAlpine.Security.Authorization.EFCore --version 2.0.0
NuGet\Install-Package IronAlpine.Security.Authorization.EFCore -Version 2.0.0
<PackageReference Include="IronAlpine.Security.Authorization.EFCore" Version="2.0.0" />
<PackageVersion Include="IronAlpine.Security.Authorization.EFCore" Version="2.0.0" />
<PackageReference Include="IronAlpine.Security.Authorization.EFCore" />
paket add IronAlpine.Security.Authorization.EFCore --version 2.0.0
#r "nuget: IronAlpine.Security.Authorization.EFCore, 2.0.0"
#:package IronAlpine.Security.Authorization.EFCore@2.0.0
#addin nuget:?package=IronAlpine.Security.Authorization.EFCore&version=2.0.0
#tool nuget:?package=IronAlpine.Security.Authorization.EFCore&version=2.0.0
IronAlpine.Security.Authorization.EFCore
EF Core provider for IronAlpine security permission projection storage and synchronization.
Why
This package productizes permission projection persistence so services do not copy repository code.
It provides:
- Query store for permission checks (
ISecurityPermissionStore). - Write-side sync store for projection updates (
ISecurityPermissionProjectionSyncStore). - Contributor-based schema registration (
SecurityPermissionModelContributor).
Install
dotnet add package IronAlpine.Security.Authorization.EFCore
Program.cs
builder.Services.AddIronAlpineAuthorizationEfCore<AppDbContext>(options =>
{
options.PermissionProjectionTableName = "SecurityPermissionProjections";
options.PermissionProjectionSchema = "security";
});
Or through security builder:
builder.Services
.AddIronAlpineSecurityJwt(builder.Configuration)
.WithAuthorizationStoreEfCore<AppDbContext>();
Configuration
Section: IronAlpine:Security:Authorization:EFCore
SecurityAuthorizationEfCoreOptions
PermissionProjectionTableName(string, default:"SecurityPermissionProjections")- Table mapped for
SecurityPermissionProjection.
- Table mapped for
PermissionProjectionSchema(string?, default:null)- Optional schema name.
Registered Services
ISecurityPermissionStore→EfCoreSecurityPermissionStore<TDbContext>ISecurityPermissionProjectionSyncStore→EfCoreSecurityPermissionProjectionSyncStore<TDbContext>IModelContributor→SecurityPermissionModelContributor
How Sync Works
EfCoreSecurityPermissionProjectionSyncStore<TDbContext>:
ReplacePermissionsAsync:- Deletes existing rows for the group.
- Inserts normalized rows (
PermissionId, trimmedPermissionName). - De-duplicates by (
PermissionGroupId,PermissionId).
DeleteGroupAsync:- Deletes all rows for group id.
If the projection entity is not registered in the model, methods no-op by design. This keeps owner contexts safe.
Migration Checklist
- Ensure
AddIronAlpineAuthorizationEfCore<TDbContext>()is registered. - Run migration add/update.
- Verify table exists:
SecurityPermissionProjections(or your configured table name).
Combination Patterns
Security.Authorization + Security.Authorization.EFCore- Complete permission check + sync pipeline.
Security.AspNetCore + Authorization.EFCore- Endpoint policy enforcement backed by EF projection.
Messaging + Authorization.EFCore- Permission group events drive projection sync via
ISecurityPermissionProjectionSyncStore.
- Permission group events drive projection sync via
Troubleshooting
- Projection table missing in migration
- Ensure
IronAlpine.Data.EFCore.Modelingis active in the service and contributor registration is not disabled.
- Ensure
- Sync handler resolves no store
- Verify package reference and
AddIronAlpineAuthorizationEfCore<TDbContext>().
- Verify package reference and
- Duplicated permission rows
- Validate incoming payload duplicates and ensure
PermissionIdis stable per permission.
- Validate incoming payload duplicates and ensure
Best Practices
- Keep permission projection as read model in non-owner services.
- Keep identity/owner context free of projection table if it is not required there.
- Use event-driven sync with deterministic
PermissionIdand explicit event versioning.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net9.0 is compatible. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net10.0
- IronAlpine.Data.EFCore.Modeling (>= 2.0.0)
- IronAlpine.Security.AspNetCore (>= 2.0.0)
- IronAlpine.Security.Authorization (>= 2.0.0)
- Microsoft.EntityFrameworkCore (>= 9.0.7)
- Microsoft.EntityFrameworkCore.Relational (>= 9.0.7)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 9.0.7)
- Microsoft.Extensions.Options.ConfigurationExtensions (>= 9.0.7)
-
net9.0
- IronAlpine.Data.EFCore.Modeling (>= 2.0.0)
- IronAlpine.Security.AspNetCore (>= 2.0.0)
- IronAlpine.Security.Authorization (>= 2.0.0)
- Microsoft.EntityFrameworkCore (>= 9.0.7)
- Microsoft.EntityFrameworkCore.Relational (>= 9.0.7)
- Microsoft.Extensions.DependencyInjection.Abstractions (>= 9.0.7)
- Microsoft.Extensions.Options.ConfigurationExtensions (>= 9.0.7)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
Stable mediator release with request/response, notification publish strategies, streaming, and dependency injection integration.