AspNet.Security.OAuth.GitHub
Advanced tools
ASP.NET Core security middleware enabling GitHub authentication.
AspNet.Security.OAuth.Providers is a collection of security middleware that you can use in your ASP.NET Core application to support social authentication providers like GitHub, Twitter/X or Dropbox. It is directly inspired by Jerrie Pelser's initiative, Owin.Security.Providers.
The latest official release can be found on NuGet and the nightly builds on MyGet.
[!TIP] While the aspnet-contrib providers are still fully supported, developers are encouraged to use the OpenIddict client for new applications.
For information, see the Migrating to OpenIddict section.
Adding social authentication to your application is a breeze and just requires a few lines in your Startup class:
public void ConfigureServices(IServiceCollection services)
{
services.AddAuthentication(options => { /* Authentication options */ })
.AddGitHub(options =>
{
options.ClientId = "49e302895d8b09ea5656";
options.ClientSecret = "98f1bf028608901e9df91d64ee61536fe562064b";
});
}
public void Configure(IApplicationBuilder app)
{
app.UseAuthentication();
app.UseAuthorization();
}
See the /samples directory for a complete sample using ASP.NET Core MVC and supporting multiple social providers.
AspNet.Security.OAuth.Providers is actively maintained by:
We would love it if you could help contributing to this repository.
Special thanks to our contributors:
Please see SECURITY.md for information about reporting security issues and bugs.
Need help or wanna share your thoughts? Don't hesitate to join us on Gitter or ask your question on StackOverflow:
This project is licensed under the Apache License. This means that you can use, modify and distribute it freely. See https://www.apache.org/licenses/LICENSE-2.0.html for more details.
The OpenIddict client and its 100+ web providers have significant advantages over the simpler OAuth 2.0-only authentication handler that is used by the aspnet-contrib providers:
Microsoft.Extensions.Http.Polly (or Microsoft.Extensions.Http.Resilience on .NET 8+)
to make backchannel HTTP communications less prone to transient network errors.For more information on how to get started with the OpenIddict web providers, you can read:
To contribute a new OpenIddict provider, visit Contributing a new Web provider.
Links to the latest stable and nightly NuGet packages for each provider, as well as a link to their integration documentation are listed in the table below.
Documentation for the providers' settings can be found here.
If a provider you're looking for does not exist, consider making a PR to add one.
FAQs
ASP.NET Core security middleware enabling GitHub authentication.
We found that aspnet.security.oauth.github demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Application Security
/Security News
Socket CEO Feross Aboukhadijeh and a16z partner Joel de la Garza discuss vibe coding, AI-driven software development, and how the rise of LLMs, despite their risks, still points toward a more secure and innovative future.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
