RepletoryLib.Auth.Jwt 1.0.0

RepletoryLib.Auth.Jwt

JWT authentication with access tokens, refresh tokens, revocation, and user context extraction.

Part of the RepletoryLib ecosystem -- standalone, reusable .NET 10 libraries with zero business logic.

Overview

RepletoryLib.Auth.Jwt provides a complete JWT authentication solution for ASP.NET Core applications. It handles access token generation with custom claims, refresh token management, token revocation via cache-based blacklisting, and automatic extraction of the current user from JWT claims.

Key Features

• Access token generation -- JWT with configurable claims, roles, tenant, and custom data
• Refresh tokens -- Secure refresh flow with configurable expiry
• Token revocation -- Blacklist revoked tokens via ICacheService
• ICurrentUserService -- Extracts user context (ID, name, roles, tenant) from JWT claims
• ASP.NET Core integration -- Configures AddAuthentication().AddJwtBearer() automatically

Installation

dotnet add package RepletoryLib.Auth.Jwt

Dependencies

Quick Start

using RepletoryLib.Auth.Jwt;

var builder = WebApplication.CreateBuilder(args);
builder.Services.AddRepletoryJwt(builder.Configuration);

var app = builder.Build();
app.UseAuthentication();
app.UseAuthorization();

{
  "Jwt": {
    "Secret": "your-256-bit-secret-key-here-replace-in-production",
    "Issuer": "MyApp",
    "Audience": "MyApp.Users",
    "ExpiryMinutes": 30,
    "RefreshTokenExpiryDays": 7,
    "EnableRevocation": true
  }
}

Configuration

JwtOptions

Usage Examples

Generating Tokens

using RepletoryLib.Auth.Jwt.Interfaces;
using RepletoryLib.Auth.Jwt.Models;

public class AuthController : ControllerBase
{
    private readonly IJwtService _jwt;

    public AuthController(IJwtService jwt) => _jwt = jwt;

    [HttpPost("login")]
    public IActionResult Login(LoginRequest request)
    {
        var user = _userService.Authenticate(request.Email, request.Password);
        if (user is null) return Unauthorized();

        var token = _jwt.GenerateToken(new JwtTokenRequest
        {
            UserId = user.Id.ToString(),
            UserName = user.FullName,
            Email = user.Email,
            Roles = user.Roles.Select(r => r.Name).ToList(),
            TenantId = user.TenantId,
            CustomClaims = new Dictionary<string, string>
            {
                ["department"] = user.Department
            }
        });

        return Ok(token);
        // { "accessToken": "eyJ...", "refreshToken": "abc123...", "expiresAt": "...", "tokenType": "Bearer" }
    }
}

Refresh Token Flow

[HttpPost("refresh")]
public async Task<IActionResult> Refresh([FromBody] RefreshRequest request)
{
    var result = await _jwt.RefreshToken(request.RefreshToken);

    if (!result.IsSuccess)
        return Unauthorized(result.Error);

    return Ok(result.Data);
}

Token Revocation

[Authorize]
[HttpPost("logout")]
public async Task<IActionResult> Logout()
{
    var token = Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
    await _jwt.RevokeToken(token);
    return NoContent();
}

Accessing Current User

AddRepletoryJwt registers ICurrentUserService which extracts user context from JWT claims:

using RepletoryLib.Common.Interfaces;

public class OrderService
{
    private readonly ICurrentUserService _user;

    public OrderService(ICurrentUserService user) => _user = user;

    public async Task CreateOrderAsync(Order order)
    {
        order.CreatedBy = _user.UserId;
        order.TenantId = _user.TenantId;

        if (!_user.HasPermission("orders.create"))
            throw new AppException("Forbidden", 403);

        var roles = _user.Roles; // ["Admin", "Manager"]
    }
}

Integration with Other RepletoryLib Packages

Testing

Use MockCurrentUserService from RepletoryLib.Testing:

using RepletoryLib.Testing;

public class OrderServiceTests : TestBase
{
    [Fact]
    public async Task CreateOrder_stamps_user_id()
    {
        Setup();
        MockUser.UserId = "user-123";
        MockUser.TenantId = Guid.NewGuid();
        Services.AddTransient<OrderService>();

        var service = BuildServiceProvider().GetRequiredService<OrderService>();
        var order = new Order();
        await service.CreateOrderAsync(order);

        order.CreatedBy.Should().Be("user-123");
    }
}

Troubleshooting

License

This project is licensed under the MIT License.

Copyright (c) 2024-2026 Repletory.

For complete documentation, infrastructure setup, and configuration reference, see the RepletoryLib main repository.