Hellmade.HubAuth.AspNetCore

ASP.NET Core integration helpers for services using Hub as OIDC authority.

Includes

• AddHubOidcAuthentication(...) -- configures Cookie + OpenID Connect authentication
• HubOidcAuthenticationOptions -- issuer, client ID, service key, scopes
• HubPermissionGateMiddleware -- gates authenticated requests through Hub's permission check
• HubPermissionGateOptions -- service key, excluded paths, skipped auth schemes
• HubUserProjectionClaimsTransformationBase -- abstract base for projecting Hub users into local stores
• HubUserProjectionContext -- context record passed to the upsert method

Scope

• Service authentication and permission gating wiring.
• Keep service-local authorization rules and entity-specific upsert logic in each consuming service.

Permission gate quick start

services.AddHubAuthServiceClients(options =>
{
    options.HubApiBaseUrl = configuration["AUTH:Hub:ApiBaseUrl"] ?? string.Empty;
});

app.UseAuthentication();
app.UseMiddleware<HubPermissionGateMiddleware>(new HubPermissionGateOptions
{
    ServiceKey = configuration["SERVICE:KEY"] ?? string.Empty,
    SkipForAuthenticationSchemes = new[] { "PersonalAccessToken" }
});
app.UseAuthorization();