auth.io 

The Authio client for .NET without any ASP.NET Core dependency: discovery, every token grant Authio supports (client credentials, authorization code, refresh, token exchange, connected accounts, device), client... More information

Extension library for integrating the Authio user validation and management system.

Protect an ASP.NET Core API with Authio: JWT bearer validation from the realm's discovery document, optional introspection (active check or opaque tokens), flattened Authio roles and permissions, scope / role /... More information

Backend-for-Frontend for Authio: lets a browser SPA (React, Angular, Vue...) sign in with Authio without ever holding a token. Cookie + OpenID Connect (code flow, PKCE, RFC 9207 iss check), server-side... More information

Protects an ASP.NET Core MCP server (OAuth 2.1 resource server) with Authio, on top of Authio.AspNetCore: JWT, JWE and opaque token validation, RFC 9728 protected resource metadata and the MCP-ready... More information

Test an application that uses Authio without an Authio server: an in-memory fake Authio served through an HttpMessageHandler (discovery, JWKS, the authorization endpoint with PKCE and web_message, every token... More information