gateway-security

What problem does it solve?

Securing gateway endpoints with consistent authentication and authorization reduces misconfigurations and security gaps across microservices, ensuring a unified security posture.

Core Features & Use Cases

• JWT authentication integration: AddJwtAuthentication extension configures JWT Bearer authentication from the Jwt section of the configuration.
• Policy-based authorization: AddPolicies extension registers policies and handlers to enforce ApiScope-based access and custom requirements across gateway endpoints.
• Centralized security primitives: Policy constants, Roles constants, and Authorization Handlers provide reusable, testable security primitives for controllers and actions.
• Flexible integration patterns: Demonstrates default [Authorize], policy-based [Authorize(Policy = ...)], and role-based [Authorize(Roles = ...)] usage across controllers.

Quick Start

Configure your gateway to enable JWT authentication and policy-based access by wiring AddJwtAuthentication and AddPolicies in startup.