
Security News
ECMAScript 2025 Finalized with Iterator Helpers, Set Methods, RegExp.escape, and More
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.
AspNet.Security.OAuth.Twitch
Advanced tools
ASP.NET Core security middleware enabling Twitch authentication.
AspNet.Security.OAuth.Providers is a collection of security middleware that you can use in your ASP.NET Core application to support social authentication providers like GitHub, Twitter/X or Dropbox. It is directly inspired by Jerrie Pelser's initiative, Owin.Security.Providers.
The latest official release can be found on NuGet and the nightly builds on MyGet.
[!TIP] While the aspnet-contrib providers are still fully supported, developers are encouraged to use the OpenIddict client for new applications.
For information, see the Migrating to OpenIddict section.
Adding social authentication to your application is a breeze and just requires a few lines in your Startup
class:
public void ConfigureServices(IServiceCollection services)
{
services.AddAuthentication(options => { /* Authentication options */ })
.AddGitHub(options =>
{
options.ClientId = "49e302895d8b09ea5656";
options.ClientSecret = "98f1bf028608901e9df91d64ee61536fe562064b";
});
}
public void Configure(IApplicationBuilder app)
{
app.UseAuthentication();
app.UseAuthorization();
}
See the /samples directory for a complete sample using ASP.NET Core MVC and supporting multiple social providers.
AspNet.Security.OAuth.Providers is actively maintained by:
We would love it if you could help contributing to this repository.
Special thanks to our contributors:
Please see SECURITY.md for information about reporting security issues and bugs.
Need help or wanna share your thoughts? Don't hesitate to join us on Gitter or ask your question on StackOverflow:
This project is licensed under the Apache License. This means that you can use, modify and distribute it freely. See https://www.apache.org/licenses/LICENSE-2.0.html for more details.
The OpenIddict client and its 100+ web providers have significant advantages over the simpler OAuth 2.0-only authentication handler that is used by the aspnet-contrib providers:
Microsoft.Extensions.Http.Polly
(or Microsoft.Extensions.Http.Resilience
on .NET 8+)
to make backchannel HTTP communications less prone to transient network errors.For more information on how to get started with the OpenIddict web providers, you can read:
To contribute a new OpenIddict provider, visit Contributing a new Web provider.
Links to the latest stable and nightly NuGet packages for each provider, as well as a link to their integration documentation are listed in the table below.
Documentation for the providers' settings can be found here.
If a provider you're looking for does not exist, consider making a PR to add one.
FAQs
ASP.NET Core security middleware enabling Twitch authentication.
We found that aspnet.security.oauth.twitch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.
Security News
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
Research
North Korean threat actors linked to the Contagious Interview campaign return with 35 new malicious npm packages using a stealthy multi-stage malware loader.