Authentication Dotnet Basic

HTTP Basic

Package

Program.cs

Đăng ký trong callback AddJarvisAuthentication. Provider truyền qua generic — mặc định ConfigBasicCredentialProvider (đọc config):

using Jarvis.Authentication;         // AddJarvisAuthentication
using Jarvis.Authentication.Basic;   // AddCoreBasic, ConfigBasicCredentialProvider

builder.Services.AddJarvisAuthentication(builder.Configuration, auth =>
{
    auth.AddCoreBasic(builder.Configuration);
});

Scheme mặc định "Basic". Handler JarvisBasicAuthenticationHandler giải mã Authorization: Basic base64(user:pass) rồi ủy xác thực cho provider. Challenge trả WWW-Authenticate: Basic realm="...".

Custom provider (DB có password hash)

auth.AddCoreBasic(builder.Configuration);

• Implement IBasicCredentialProvider.AuthenticateAsync(scheme, user, password, ct) → BasicValidationResult? (null = fail).
• Đăng ký Singleton (tự động) — tra DB → IDbContextFactory / IServiceScopeFactory.

appsettings.json

Section Authentication:Basic:{realm} — Realm (header challenge) + Users (dict user → Password, Roles):

{
  "Authentication": {
    "Basic": {
      "Default": {
        "Realm": "Jarvis API",
        "Users": {
          "demo": { "Password": "", "Roles": [ "User" ] }
        }
      }
    }
  }
}

⚠️ Password plain-text trong config — chỉ dev/test hoặc service-to-service nội bộ. Production dùng custom IBasicCredentialProvider với password đã hash. Password — env / secret store.

Validate

• Thiếu / sai credential → 401 (+ header WWW-Authenticate: Basic)
• Authorization: Basic base64(demo:pass) hợp lệ → 200, claims gồm Name + Roles

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: hoangnh2412
• Source: hoangnh2412/ai-skills
• License: MIT

Install and usage instructions live in the source repository linked above.