PrimusSaaS.Memberships.AspNetCore 0.1.0

PrimusSaaS.Memberships.AspNetCore

Release status: preview integration package for the public Memberships package family.

ASP.NET Core integration package for PrimusSaaS.Memberships.

Current validation

• Covered by PrimusSaaS.Memberships.Tests
• Validated request paths include invite create/accept/resend, membership suspend/reactivate/delete, bootstrap admin, active-tenant read/write, and unauthorized access rejection
• Public release position: treat the package family as preview until your own operational integrations are validated

Usage

builder.Services
    .AddPrimusMemberships()
    .AddPrimusMembershipsAspNetCore(options =>
    {
        options.AdminPolicyName = "TenantAdmin";
    });

app.UseAuthentication();
app.UseAuthorization();
app.MapPrimusMembershipEndpoints();

All endpoints require authentication by default. Configure SelfPolicyName and AdminPolicyName to layer host-application authorization policy on top of that default.

Endpoint surface

• GET /primus/memberships/me/tenants
• GET /primus/memberships/me/active-tenant
• POST /primus/memberships/me/active-tenant
• POST /primus/invitations/{invitationId}/accept
• GET /primus/tenants/{tenantId}/memberships
• GET /primus/tenants/{tenantId}/memberships/{userId}
• DELETE /primus/tenants/{tenantId}/memberships/{userId}
• POST /primus/tenants/{tenantId}/memberships/{userId}/suspend
• POST /primus/tenants/{tenantId}/memberships/{userId}/activate
• GET /primus/tenants/{tenantId}/invitations
• POST /primus/tenants/{tenantId}/invitations
• POST /primus/invitations/{invitationId}/resend
• POST /primus/invitations/{invitationId}/revoke
• POST /primus/tenants/{tenantId}/bootstrap-admin

The package does not translate service exceptions into problem-details responses for you. If you need stable 400/409 response contracts, add host-level exception mapping.

Multi-Tenancy composition note

If the host also uses UsePrimusTenantIsolation(), invitation acceptance may need a narrow ITenantRequirementExemptionPolicy because the invited user is authenticated before the first active tenant membership exists. The verified example is documented at /docs/modules/broker-memberships-dotnet-integration.

Documentation

• Overview: /docs/modules/memberships
• Verified quickstart: /docs/modules/memberships/verified-dotnet-quickstart
• Integration: /docs/modules/memberships/integration-guide
• Endpoint reference: /docs/modules/memberships/endpoint-reference