CollectiveOAuthCore 1.1.0

CollectiveOAuthCore

CollectiveOAuthCore is a third-party login (OAuth2 / OIDC) integration library for ASP.NET Core. It wraps the authorization flows of 30+ domestic and international platforms behind a unified AuthRequest API, so you can add social login to your app with just a few lines of code.

.NET 平台下的第三方授权登录工具类库，封装主流平台 OAuth2 / OIDC 流程，统一返回 AuthUser，让第三方登录接入 So easy！

Features

• Wide coverage – 30+ platforms (GitHub, Google, Microsoft, LinkedIn, Facebook, Weibo, QQ, WeChat Open/MP/Enterprise, Alipay, Gitee, GitLab, Baidu, XiaoMi, Huawei, Douyin, Meituan, Eleme …).
• Simple API – one authorize(state) + login(callback) flow for every platform.
• Unified model – AuthUser with uuid / nickname / avatar / email / token / source.
• State anti-replay – built-in IAuthStateCache, customizable (e.g. Redis for multi-instance).
• Async & DI friendly – loginAsync / refreshAsync / revokeAsync, injectable HttpClient.
• Multi-target – net8.0, net9.0, net10.0.

Installation

dotnet add package CollectiveOAuthCore

Quick Start

1. Configure a client

using Come.CollectiveOAuth.Config;

var config = new ClientConfig
{
    clientId     = "your-client-id",
    clientSecret = "your-client-secret",
    redirectUri  = "https://your-domain.com/callback/github",
    scope        = "user:email"
};

2. Redirect to the authorization page

using Come.CollectiveOAuth.Request;
using Come.CollectiveOAuth.Utils;

var request = new GithubAuthRequest(config);
string state = AuthStateUtils.createState();
return Redirect(request.authorize(state));

3. Handle the callback

public IActionResult Callback(AuthCallback callback)
{
    var request = new GithubAuthRequest(config); // same cache instance as step 2
    AuthResponse response = request.login(callback);
    if (response.ok())            // code == 2000 means success
    {
        AuthUser user = (AuthUser)response.data;
        // user.uuid / user.nickname / user.avatar / user.email / user.token
    }
    return View();
}

Note: authorize and login must share the same IAuthStateCache instance; otherwise state validation fails on callback. The default DefaultAuthStateCache uses in-process IMemoryCache (fine for single-instance). For multi-instance deployments, inject a shared cache (Redis, etc.) implementing IAuthStateCache.

Supported Platforms

Namespaces

using Come.CollectiveOAuth.Config;
using Come.CollectiveOAuth.Models;
using Come.CollectiveOAuth.Request;
using Come.CollectiveOAuth.Utils;
using Come.CollectiveOAuth.Cache;

More

• Full docs (中文): see 使用文档.md / 使用文档.en.md shipped with the source.
• Sample: Come.AspNetCore.Sample for a complete ASP.NET Core demo.
• Source: https://gitee.com/izory/CollectiveOAuth

License

MIT — see LICENSE.

Inspired by the JustAuth project.