astrolabe-local-users

You implement local authentication by extending AbstractLocalUserService and AbstractLocalUserController, then wiring up IPasswordHasher, IEmailService, and a token generator in dependency injection to handle user creation, MFA, and email verification.

The best way to add local password resets without external OAuth is using a reusable local user management layer that provides pluggable security and email services, integrating directly with EF Core or other custom data stores for user storage.

Yes, this local authentication Skill works with EF Core. It integrates with EF Core or other custom data stores, making it suitable for .NET applications that require custom user storage and specific business rules.

You set up API endpoints by extending AbstractLocalUserController, which provides standard REST API endpoints for local user operations including account creation, authentication, MFA, password resets, and profile management.

Yes, you need an email service. The Skill requires a pluggable IEmailService implementation alongside a password hasher and token generator to successfully execute email verification flows and password reset requests.

You should use a local user management layer when your .NET application requires custom user storage and specific business rules for username/password authentication, rather than relying on external OAuth providers for identity management.