Stratara.Sessions 4.1.1

Prefix Reserved
There is a newer version of this package available.
See the version list below for details.
dotnet add package Stratara.Sessions --version 4.1.1
                    
NuGet\Install-Package Stratara.Sessions -Version 4.1.1
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="Stratara.Sessions" Version="4.1.1" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="Stratara.Sessions" Version="4.1.1" />
                    
Directory.Packages.props
<PackageReference Include="Stratara.Sessions" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add Stratara.Sessions --version 4.1.1
                    
#r "nuget: Stratara.Sessions, 4.1.1"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package Stratara.Sessions@4.1.1
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=Stratara.Sessions&version=4.1.1
                    
Install as a Cake Addin
#tool nuget:?package=Stratara.Sessions&version=4.1.1
                    
Install as a Cake Tool

Stratara.Sessions

Derived. The behaviour described here is specified under openspec/specs/. Those specifications are the source; this page explains and illustrates them.

License: MIT.

Concrete session-context provider + ASP.NET Core middleware for Stratara's Actor/Subject session model. Reads tenant + user identity from JWT claims (with optional X-Tenant-Id / X-Client-Id header fallbacks), populates the ambient ISessionContextProvider, and exposes the Actor/Subject pair to every request.

Since 3.0.10: the X-Tenant-Id header fallback is opt-in via SessionContextOptions.AllowTenantHeader = true (default false). Without the gate, any authenticated principal could pick the tenant their request operated against in hosts whose JWT does not carry the tenant claim. Embed the tenant id in the JWT claim set, or opt in explicitly when an upstream platform-admin role check guards the header.

Quick start

// Program.cs / Startup.cs
builder.Services.AddSessionContext();

// In the middleware pipeline:
app.UseMiddleware<SessionContextMiddleware>();

Then resolve in any scoped service:

public sealed class SomeHandler(ISessionContextProvider sessionContextProvider)
{
    public async Task HandleAsync(...) {
        var session = sessionContextProvider.Current
            ?? throw new InvalidOperationException("Session context not set");

        // session.TenantId        = Subject (data owner) — used for filtering / encryption AAD
        // session.UserId          = Subject user (nullable)
        // session.ActorTenantId   = Actor (who triggered) — audit trail
        // session.ActorUserId     = Actor user — audit trail
    }
}

What's in the box

  • SessionContextProvider — internal sealed impl of ISessionContextProvider, scoped per request. Writes Activity tags (correlation.id, causation.id, tenant.id, user.id) automatically on Set / Clear.
  • SessionContextMiddleware — ASP.NET Core middleware that extracts tenant + user from ClaimTypes.NameIdentifier + stratara:tenant_id claim (with optional X-Tenant-Id header fallback gated by SessionContextOptions.AllowTenantHeader) and constructs a SessionContext whose actor tenant and data-owner tenant are the claimed tenant, whose actor user is the claimed user, and whose data-owner user is left unset. It stays unset on purpose: the scope a protected field is encrypted under follows the data owner, so filling in the user would move every protected field written from a request to a per-user scope.
  • SessionContextOptions — configuration (SessionContext section) controlling the header fallback gate. Bind via services.Configure<SessionContextOptions>(...) or services.AddOptions<SessionContextOptions>().Bind(...).
  • StrataraClaimTypes — claim-name constants (stratara:tenant_id).
  • DefaultTenantIdentifier — sentinel Guid used when no tenant claim or header is present (typically anonymous / system flows).
  • AddSessionContext() DI extension — registers the concrete provider as a scoped service against ISessionContextProvider.

Adopting the Actor/Subject model

For most operations the actor's tenant is the data-owner tenant — a user acts on their own tenant's data — while the data-owner user stays unset unless the application sets it. The tenants only diverge for:

  • PlatformAdmin cross-tenant operations (Subject = customer tenant, Actor = admin tenant)
  • Anonymous endpoints (Actor = Guid.Empty, Subject = the just-minted tenant)
  • System / saga flows (Actor = SessionContext.SystemActorTenantId / SystemActorUserId)

Consumers that reject ambient context (libraries that prefer explicit TenantId parameters everywhere) do not need to take this package — Stratara.Mediator and the rest of the framework work without an ISessionContextProvider registered as long as no path requires it.

Dependencies

  • Stratara.Abstractions — for ISessionContextProvider.
  • Stratara.Contracts — for the SessionContext record (wire-level).
  • Stratara.Diagnostics — for ApplicationDiagnostics activity tags.
  • Microsoft.AspNetCore.Http.Abstractions — for HttpContext / RequestDelegate.
  • Microsoft.Extensions.DependencyInjection.Abstractions.
  • OpenTelemetry.Api.
Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (3)

Showing the top 3 NuGet packages that depend on Stratara.Sessions:

Package Downloads
Stratara.Shared

Umbrella package for the Stratara framework — source-generated logger extensions for command flows, domain-event helpers, merge primitives, and the Tier-A/B abstractions surface re-exported as one transitive bundle.

Stratara.Outbox.RabbitMQ

Outbox-pattern command and event dispatch for the Stratara event-sourced stack — RabbitMQ IMessageBus implementation, retry worker, mediator command worker, and Redis-coordinated projection-replay state. Azure Service Bus support ships as the sibling Stratara.Outbox.AzureServiceBus package.

Stratara.Infrastructure

Infrastructure glue for the Stratara framework — authorization decorators, configuration providers, and DI composition helpers that wire Mediator, Outbox, Identity, and EF Core into a hosted app.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
4.4.4 144 10/10/2026
4.4.3 106 10/10/2026
4.4.2 529 10/2/2026
4.4.1 557 9/29/2026
4.4.0 293 9/27/2026
4.3.1 353 9/25/2026
4.3.0 538 9/23/2026
4.2.0 305 9/18/2026
4.1.1 311 9/16/2026
4.1.0 236 9/16/2026
4.0.4 1,092 9/14/2026
4.0.3 334 9/3/2026
4.0.2 744 9/3/2026
4.0.1 437 9/2/2026
4.0.0 811 8/31/2026
4.0.0-preview.1 129 8/31/2026
3.4.0 323 8/28/2026
3.3.0 473 8/25/2026
3.2.3 293 8/22/2026
3.2.2 867 8/14/2026
Loading failed

Correctness fixes for the Orleans execution model ahead of production use. Recorded commands can no longer
reach a bus drain, a durable timer fires once however long its handler runs, and heavy commands are
specified as the exception to the one-writer-per-aggregate promise they always were. The execution-model
reset removes only the host's own checkpoints, and three store-level fixes land for the partition
counter, its backfill and a checkpoint's first write. No schema change; **stop every bus outbox worker
before upgrading hosts that record commands through the execution model**, and register
`AddStrataraIntentStore` on the silos that run the drain.

### Changed

- **Orleans: the execution-model reset removes only the checkpoints of the host's own projections and
 sagas.** It removed every checkpoint in the read store, so a reset in one deployment made another
 deployment sharing the read store rebuild its projections unasked. The reset now removes the
 checkpoints of the projections and sagas registered in the composition it is resolved from, and the
 report counts only those. A checkpoint of a projection the host no longer registers stays; nothing
 reads it. Resolve the reset from the host's own composition — one that registers no store reader
 removes no checkpoint.
- **The documentation states when a read store can be shared.** Checkpoints are keyed by consumer, not
 by deployment: deployments sharing a read store need distinct projection names, and at most one of
 them runs `AddStrataraSagaGrains`.
- **Orleans: heavy commands are specified as running outside their aggregate's turn and order.** They
 always ran in their own bounded pool beside the aggregate's other commands; the specification promised
 otherwise. Their hand-over no longer holds the per-aggregate send order either: a command dispatched after
 a heavy command for the same aggregate no longer waits for it, and two due heavy commands on one aggregate
 no longer hold up the drain's resume pass. Where a heavy command and another command on the same aggregate
 both append, the store's version check refuses the later one, which is resumed like any failing command.
- **Orleans: a recorded command is stored under a kind of its own.** No bus outbox drain reads it any more.
 Commands recorded under 4.1.0 are still resumed; stop every bus outbox worker before upgrading hosts that
 record commands.

### Fixed

- **Orleans: the outbox drain no longer publishes recorded commands to the bus.** It chose between resuming
 recorded commands and publishing stored commands by whether the execution model's dispatcher was
 registered on its own silo, and the migration guide registers the dispatcher on the API host and the drain
 on the silos. Such a silo handed every recorded command — kept ones included — to the bus: commands ran
 twice, kept commands came back, the attempt bound did not hold. The drain now resumes recorded commands
 wherever an intent store is registered and warns (`117_111`) where recorded commands exist but none is.
 Register `AddStrataraIntentStore` on the silos that run the drain.
- **Orleans: a durable timer fires once however long its handler runs.** A handler that outlasted the
 reminder call's response timeout was started again by the next tick. A tick that arrives while the same
 timer's handler runs now does nothing, and a tick confirms its timer is still registered before firing.

- **Orleans: two writers of the same first checkpoint no longer fail one of them.** When an
 activation and its successor overlap during a failover, both can find no checkpoint row and both
 insert it; the one that lost to the key threw. It now updates the row the other inserted.
- **Orleans: the partition counter works on a model that does not use snake-case names.** The
 interceptor advanced the counter with SQL naming `partition_position` and its columns literally, so
 a write context mapping the counter under other names failed every append. It now goes through the
 context's model, as the native reader already did.
- **Orleans: the partition-counter backfill positions old entries in the order they were appended.**
 It ordered each partition's history by bucket first, so a projection or saga reading across
 aggregates saw the facts of one bucket before earlier facts of another. Entries are now positioned
 in sequence order, as the event-sourcing-store specification already promised. A store backfilled
 under 4.1.0 keeps the positions it was given; the backfill does not reposition entries.