-
Asynchronous and secure authentication and authorization.
-
JWT token.
-
Refresh tokens.
-
Claims and roles.
-
Admin endpoints for management.
-
Onion architecture, easy to maintain/add new features.
-
Swagger documentation.
-
Requests validation.
-
Users metadata logging.
-
Health checks.
-
Pagination.
-
Versioned API.
-
(Future features)
- Third party oauth services(twitter, google).
- SDK for developers.
- AWS IAM authentication
- Easier cloud deploy using Terraform and environment files.
- Strong security tests and analysis.
- MFA (Multi-factor authentication).
- SSO (Single Sign On).
- Debug mode with appsettings.development.json environment variables:
run-devEnv.bat/sh
- Production deploy with appsettings.production.json variables:
run-releaseEnv.bat/sh
Take in mind you should get the production appsettings file not provided in this repository for security. Also, you should change the admin default user environment variables in Dockerfile.