NowAround.SharedKernel.Api.Authentication

Shared JWT bearer authentication setup for NowAround internal service APIs.

Features

• Binds and validates NowAroundJwtOptions from configuration.
• Registers ASP.NET Core JWT bearer authentication.
• Configures issuer, audience, signing key, lifetime validation, role claim, and subject claim mapping.
• Optional JWT event logging for troubleshooting authentication failures and challenges.

Installation

dotnet add package NowAround.SharedKernel.Api.Authentication

Configuration

The default configuration section name is InternalJwt.

{
  "InternalJwt": {
    "Issuer": "nowaround",
    "Audience": "nowaround-internal-services",
    "SigningKey": "replace-with-a-long-secret",
    "LogEvents": false,
    "AccessTokenLifetimeMinutes": 60
  }
}

Issuer, Audience, and SigningKey are required. Options are validated on application startup.

Usage

Register authentication with the configuration section:

using NowAround.SharedKernel.Api.Authentication;
using NowAround.SharedKernel.Api.Authentication.Options;

builder.Services.AddNowAroundAuthentication(NowAroundJwtOptions.SectionName);

Enable authentication and authorization in the request pipeline:

app.UseAuthentication();
app.UseAuthorization();

Options

NowAroundJwtOptions:

• Issuer: expected token issuer.
• Audience: expected token audience.
• SigningKey: symmetric signing key used to validate tokens.
• LogEvents: enables JWT debug logging for failed authentication, successful validation, and challenges.
• AccessTokenLifetimeMinutes: shared token lifetime setting for callers that also generate internal tokens.

The bearer configuration uses ClaimTypes.Role for roles and sub for the name claim.