Tharga.Team 3.9.0

Tharga Team

Domain models, service abstractions, and authorization primitives for multi-tenant Blazor applications. This package has no server-side dependencies and works with both Blazor Server and Blazor WebAssembly.

What's included

Team and user models

• ITeam / ITeam<TMember> - Team aggregate with members.
• ITeamMember - Team member with AccessLevel, invitation state, tenant roles, and scope overrides.
• IUser - User identity.
• Invitation, InviteUserModel, MembershipState.

Service interfaces

• ITeamService - Team CRUD, member management, invitations. Includes GetMembersAsync(teamKey) returning IAsyncEnumerable<ITeamMember> for consumers that need to enumerate members without knowing the per-consumer TMember type.
• ITeamManagementService - Scope-enforced mutations (create, rename, delete, invite, etc.).
• IUserService - Current user resolution.
• IApiKeyAdministrationService / IApiKeyManagementService - API key management.
• IApiKeyLifecycleHandler - Opt-in hook receiving an API key's private token on create/recycle (and a tokenless delete signal) via ApiKeyLifecycleContext / ApiKeyLifecycleReason. Registered through ThargaTeamOptions.AddApiKeyLifecycleHandler<T>().

Authorization

• AccessLevel enum - Owner, Administrator, User, Viewer, Custom. Custom grants no inherited base scopes (effective scopes = roles ∪ scope overrides only) for least-privilege keys/members.
• Tag record - System-set key-value tag on an API key (a list, so a key may repeat). Set at creation only; surfaced as a tag.{Key} claim on the authenticated principal.
• TeamClaimTypes - Claim type constants (TeamKey, AccessLevel, Scope, TagPrefix).
• IScopeRegistry / ScopeRegistry - Register and resolve scopes per access level.
• ITenantRoleRegistry / TenantRoleRegistry - Register code roles (global, fixed at deploy time) with associated scopes.
• ITenantRoleService / TenantRoleService - Team-aware role resolution: merges code roles with a team's runtime-defined custom roles and unions their scopes for a member of a given team. Registered by AddThargaDynamicTenantRoles() (wired when o.EnableDynamicRoles = true); custom roles are created/edited per team via ITeamService.SetTeamCustomRolesAsync, with scopes constrained to app-registered scopes. The scope required to manage custom roles is configurable via AddThargaDynamicTenantRoles(o => o.ManageScope = "…") (default team:manage).
• ITenantRoleVisibilityProvider - Optional per-team hook that decides whether a tenant role is offered in the role editor. Default (AllRolesVisibleTenantRoleVisibilityProvider) shows every role; register your own to hide feature-gated roles from teams where the feature is disabled. Hiding a role never prunes existing assignments and does not affect scope resolution.
• RequireAccessLevelAttribute / RequireScopeAttribute - Declarative authorization on service methods.
• TeamScopes / ApiKeyScopes / AuditScopes - Built-in scope constants (audit:read gates the audit log).
• SystemTeamScopes - Cross-team system scopes: teams:read (enumerate any team), teams:delete (delete any team), teams:assign-owner (give an ownerless team an owner, chosen from its existing members; refused when the team already has one).
• ISystemScopeRegistry / ISystemRoleRegistry - Global (system) scopes for system API keys, and a mapping of app/global roles (e.g. Developer) to those scopes for privileged users. Configured via o.ConfigureSystemScopes / o.ConfigureSystemRoles.

Base classes

• TeamServiceBase - Implement your own team service backend.
• UserServiceBase - Implement your own user service backend.

What you must override, and what happens if you do not

UserServiceBase leaves persistence to you. Several members are virtual with a do-nothing default, so forgetting one produces a write that reports success and discards the data — no error, no log, and a feature that looks configured and is not.

You are told at startup. AddThargaTeamBlazor reports every un-overridden member in one error, naming the type and what each silently loses. Set o.Blazor.ThrowOnIncompleteUserService = true to make it fatal instead. Members whose feature is unreachable — the icon one with no IIconStore registered — are not reported, so the message stays about real mistakes.

Deriving from UserServiceRepositoryBase (in Tharga.Team.MongoDB) implements all of these. The gaps only apply to a service extending UserServiceBase directly.

One of them cannot be caught by an interface check. SetUserIconReferenceAsync is protected, so it does not appear in an interface map — a test asserting "my service implements IUserService" cannot see it. The startup check reflects over the concrete type and walks the base chain instead, so an override on your own intermediate base counts.

The user cache

UserServiceBase caches resolved users. Overriding a persistence member replaces the path that invalidated it, so the toolkit invalidates through a decorator instead — you do not need to call InvalidateUserCache yourself.

If you see a change that survives every page reload and corrects only on process restart, that is a stale-cache read. Nothing else looks like that; a write that never landed looks identical on screen and has the opposite fix.

Related packages