loizidesdemetris 

Shared domain primitives and base entities for applications. Provides base classes for entities, aggregate roots, and domain events following Domain-Driven Design principles.

Security claims, roles, and authorization extensions for OnlineMenu applications. Provides extension methods for ClaimsPrincipal to access user information and permissions.

Provider-agnostic authentication abstractions. Supports multiple authentication methods including username/password, phone OTP, email OTP, and social login.

Multi-tenant data isolation for Entity Framework Core. Provides tenant context services, base tenant entity, and query filtering for SaaS applications.

Keycloak implementation of identity provider. Supports OIDC/OAuth2 authentication, OTP verification, and user management through Keycloak.

Production-ready health check infrastructure for ASP.NET Core services with separate liveness, readiness, and startup endpoints. Includes PostgreSQL health checks and migration-aware startup state tracking.

Reusable Backend-For-Frontend engine for ASP.NET Core. Terminates auth server-side: holds OIDC tokens in a Redis-backed session, hands the browser only an opaque httpOnly cookie, and forwards Bearer tokens to... More information

Event contracts for NotificationService integration. All services reference this package to publish notification events.

SMS and email notification providers for multi-tenant SaaS applications. Includes Twilio SMS provider and console provider for development.

Database-backed OTP authentication with Entity Framework Core. Includes OTP generation, storage, validation, and cleanup with rate limiting.

Shared RabbitMQ configuration and publisher utilities for all services. REQUIRED for publishing notification events.

Production-ready rate limiting defaults for ASP.NET Core services with pre-configured policies (Auth, Api, Public, Upload). Sliding window partitioned by user or IP. One-line adoption via... More information

AES-256-GCM at-rest secret protector. ISecretProtector encrypts sensitive secrets (API keys, webhook signing secrets, payment credentials) with a single configured key. ITenantSecretProtector (1.1.0) adds... More information

One-line, branded, self-contained OpenAPI docs portal for ASP.NET Core services. Serves a branded Scalar interactive reference AND the raw Swagger UI over your existing /swagger/v1/swagger.json — with the... More information

Shared structured logging configuration with Serilog, Grafana Loki sink, PII masking, correlation ID tracking, and tenant-aware enrichers for all SaaS services.

Reusable platform-subscription billing and entitlement for multi-tenant ASP.NET Core SaaS. Two orthogonal entitlement axes — plan rank (IsAtLeast) and licensed module set (HasModule) — both enforced as ASP.NET... More information

Storage-agnostic per-tenant metering for multi-tenant SaaS: pre-paid credit balance + per-unit cost with atomic charge, monthly quota, per-minute rate limit, and per-IP demo cap. All decision logic + window... More information

Portfolio-wide attribution middleware for ASP.NET Core services. Adds an X-Built-By response header, a "built by" footer to Swagger UI, and a builtBy field to the standard health-check payload. One line of... More information

Canary authentication middleware + reserved-prefix validation for E2E canary runs. Recognizes the X-Canary-Run-Id header only when accompanied by a valid superUser JWT (defense-in-depth: the header alone does... More information

Durable outbound-webhook delivery for multi-tenant ASP.NET Core SaaS. A per-endpoint transactional outbox: each (event x subscribed endpoint) is delivered and retried independently on its own back-off, so one... More information