Csag.Blueprint.Web 0.1.1

.NET 10.0 This package targets .NET 10.0. The package is compatible with this framework or higher. 
dotnet add package Csag.Blueprint.Web --version 0.1.1
                    


                    

                
NuGet\Install-Package Csag.Blueprint.Web -Version 0.1.1
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Csag.Blueprint.Web" Version="0.1.1" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="Csag.Blueprint.Web" Version="0.1.1" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="Csag.Blueprint.Web" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add Csag.Blueprint.Web --version 0.1.1
                    


                    

                
#r "nuget: Csag.Blueprint.Web, 0.1.1"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package Csag.Blueprint.Web@0.1.1
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=Csag.Blueprint.Web&version=0.1.1
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=Csag.Blueprint.Web&version=0.1.1
                    


                            Install as a Cake Tool

Csag.Blueprint.Web

Overview

This package provides the shared web-layer composition for CSAG Blueprint-based applications.

It owns reusable validated options, builder and middleware composition helpers, FastEndpoints/Swagger setup, OAuth integration, correlation and request-culture infrastructure, and readiness support that applications can plug into their host.

Core areas

Options and validation

The package ships reusable option types and validators for:

  • database startup behavior
  • API/security settings
  • cache provider settings
  • feature flags
  • localization settings

Use:

services.AddBlueprintDefaultValidatedOptions(configuration);

This registers the package-owned validated options rooted under the Blueprint configuration section.

Builder composition

AddBlueprintServices(this WebApplicationBuilder) wires shared web services such as:

  • HTTPS redirection / HSTS / security headers setup
  • CORS configuration
  • Google OAuth authentication
  • FastEndpoints registration
  • Swagger/OpenAPI registration
  • distributed cache registration
  • anti-forgery services

Middleware composition

The package provides two main composition helpers:

app.UseBlueprintSecurityHeaders();
app.UseBlueprintMiddleware();

UseBlueprintMiddleware() applies the shared request pipeline:

  • correlation ID middleware
  • CORS
  • authentication
  • tenant middleware
  • request localization
  • authorization

Applications may still append app-specific middleware before endpoint mapping.

Reusable middleware and services

Component Purpose
CorrelationIdMiddleware Adds/propagates correlation IDs per request.
TenantMiddleware Establishes the ambient tenant context for the request. Delegates how the tenant is determined to ITenantResolver.
HttpAuditMiddleware Emits audit events for HTTP requests.
CorrelationIdDelegatingHandler Propagates correlation IDs to outbound HTTP requests.
SessionClaimRequestCultureProvider Resolves request culture from claims and Accept-Language.
CultureNormalizationHelper Matches and validates requested cultures/languages.
StartupCompletedHealthCheck Reusable readiness gate used with startup orchestration.

Tenant resolution (the addressing seam)

ITenantResolver decides which tenant an incoming request belongs to. The package ships ClaimsTenantResolver as the default, which reads the tenant from the authenticated session's TenantId claim — "session-resolved" addressing, where the tenant is a property of who you are signed in as rather than of the URL you requested.

Other generic addressing strategies — a vanity subdomain (acme.example.com), a path segment (/t/acme), a header-driven tenant — belong in this package as additional ITenantResolver implementations; if the one you need is missing, add it here rather than in your application. A custom, app-local implementation remains possible for an addressing scheme that is genuinely app-specific and where no generic resolver makes sense. Either way the default is registered with TryAddScoped, so a resolver registered before AddBlueprintServices wins and the package default never has to be unregistered:

builder.Services.AddScoped<ITenantResolver, MyAppSpecificTenantResolver>();
builder.AddBlueprintServices();

Two things to know before switching addressing strategy:

  • TenantMiddleware runs after UseAuthentication/UseAuthorization, because the default resolver needs the authenticated principal. A host- or path-based resolver does not, and moving the middleware earlier is what enables per-tenant branding and per-tenant identity-provider routing on the sign-in page.
  • Sign-in currently derives the tenant and writes it into the session ticket. Once the URL is the source of truth that relationship inverts, so session composition needs revisiting too. The resolver is the seam, not the whole job.

The resolver returns Guid?; null means "no tenant context", which is a normal state for anonymous requests, platform-scope endpoints, and users who belong to no tenant.

FastEndpoints and Swagger

The package owns:

  • FastEndpoints registration helpers
  • conventional endpoint routing/naming helpers
  • Swagger/OpenAPI registration helpers

Applications still own their endpoint classes, DTOs, validators, and policies.

Ownership Boundary

This package owns reusable web composition, not the application host itself.

The consuming application still owns:

  • Program.cs
  • endpoint implementations
  • app-specific validators and option extensions
  • host-specific runtime services
  • concrete authentication/authorization decisions at the app level
Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (1)

Showing the top 1 NuGet packages that depend on Csag.Blueprint.Web:

Package Downloads
Csag.Blueprint.Testing

Test infrastructure with Testcontainers, integration test base classes, and AutoFixture support for CSAG Blueprint applications.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
0.1.1 46 8/13/2026
0.1.0 126 7/3/2026