Security & Identity for .NET
Identity providers, OAuth/OIDC, tokens, cryptography and authorization.
- Projects
- 44
- Groups
- 3
- Combined stars
- 73.5K
Identity providers & OIDC 17
-
ASP.NET Core Identity MIT The membership system built into ASP.NET Core: users, roles, claims, 2FA, external logins. ★ 38.5K ⤓ 303.3M -
OpenIddict Apache-2.0 Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET ★ 5.3K ⤓ 39.2M -
AspNet.Security.OAuth.Providers Apache-2.0 OAuth 2.0 social authentication providers for ASP.NET Core ★ 2.5K ⤓ 3.3M -
Duende IdentityServer $ Commercial licence The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core ★ 1.6K ⤓ 29.2M -
MSAL.NET ☁ Paid service MIT Microsoft Authentication Library (MSAL) for .NET ★ 1.5K ⤓ 3B -
Sustainsys.Saml2 Saml2 Authentication services for ASP.NET ★ 1K ⤓ 12.5M -
Microsoft.Identity.Web ☁ Paid service MIT Helps creating protected web apps and web APIs with Microsoft identity platform and Azure AD B2C ★ 789 ⤓ 242.2M -
Novell.Directory.Ldap MIT .NET LDAP client library for .NET Standard >= 2.0, .NET Core >=1.0, NET5/NET6/NET7/NET8 - works with any LDAP protocol compatible directory server (including Microsoft Active Directory). ★ 606 ⤓ 24M -
GoogleAuthenticator Apache-2.0 Simple, easy to use server-side two-factor authentication library for .NET that works with Google Authenticator and Authy. ★ 392 ⤓ 14M -
Auth0 .NET SDK ☁ Paid service MIT .NET client for the Auth0 Authentication & Management APIs. ★ 364 ⤓ 37M -
AspNetCore.Authentication.ApiKey MIT Easy to use and very light weight Microsoft style API Key Authentication Implementation for ASP.NET Core. It can be setup so that it can accept API Key in Header, Authorization Header, QueryParams or HeaderOrQueryParams. ★ 305 ⤓ 9.6M -
ITfoxtec Identity SAML 2.0 BSD-3-Clause ITfoxtec Identity Saml2 adds SAML-P support for both Identity Provider (IdP) and Relying Party (RP) on top of the SAML 2.0 functionality implemented in the .NET framework. ★ 295 ⤓ 16M
-
IdentityModel Apache-2.0 Duende's Free and Open Source software. ★ 175 ⤓ 50.4M -
Abblix OIDC Server $ Commercial licence Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects ★ 113 ⤓ 7.4K -
Okta ASP.NET ☁ Paid service Apache-2.0 okta-aspnet ★ 104 ⤓ 14.6M -
IdentityServer4 Archived Apache-2.0 ★ 64 -
Logto .NET ◐ Open core Logto .NET Core SDKs. ★ 13 ⤓ 44.6K
Tokens & cryptography 18
-
JWT Jwt.Net, a JWT (JSON Web Token) implementation for .NET ★ 2.2K ⤓ 96.1M -
BouncyCastle C# MIT BouncyCastle.NET Cryptography Library (Mirror) ★ 1.9K ⤓ 501.3M -
Fido2 .NET MIT Passkeys, FIDO2 and WebAuthn .NET library. ★ 1.5K ⤓ 8.7M -
Otp.NET MIT A .NET implementation of TOTP and HOTP for things like two-factor authentication codes. ★ 1.3K ⤓ 45.1M -
Microsoft.IdentityModel MIT IdentityModel extensions for .NET ★ 1.2K ⤓ 4.1B -
jose-jwt MIT Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core ★ 1K ⤓ 77.8M -
Microsoft DevSkim MIT DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities. ★ 1K -
BCrypt.Net-Next MIT BCrypt.Net - Bringing updates to the original bcrypt package ★ 998 ⤓ 70.3M -
Security Code Scan Inactive LGPL-3.0 Vulnerability Patterns Detector for C# and VB.NET ★ 970 ⤓ 19.7M -
SecurityDriven.Inferno :white_check_mark: .NET crypto done right. Professionally audited. ★ 584 ⤓ 2.7M
-
NSec MIT A modern and easy-to-use cryptographic library for .NET based on libsodium ★ 451 ⤓ 18.8M -
Pkcs11Interop Apache-2.0 Managed .NET wrapper for unmanaged PKCS#11 libraries ★ 309 ⤓ 10.8M -
Konscious.Security.Cryptography Inactive MIT An implementation of Argon2 winner of PHC
https://password-hashing.net/#argon2
Usage follows standard types found in System.Security.Cryptography in corefx. Specifically DeriveBytes.
C# Implementation of the Argon2 1.3 spec with variants for Argon2i, Argon2d, and Argon2id ★ 277 ⤓ 11.8M -
PgpCore MIT .NET Core class library for using PGP ★ 264 ⤓ 18.7M -
Paseto.Core MIT 🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET ★ 156 ⤓ 711.5K -
libsodium-core MIT libsodium for .NET - A secure cryptographic library ★ 152 ⤓ 7.6M -
NaCl.Core MIT 🔑 NaCl.Core, a cryptography library for .NET ★ 80 ⤓ 1.2M -
PemUtils Archived Apache-2.0 Managed .NET (C#) utility library for working with PEM files with DER/ASN.1 encoding ★ 65 ⤓ 6.9M
Authorization & hardening 9
-
HtmlSanitizer MIT Cleans HTML to avoid XSS attacks ★ 1.7K ⤓ 142M -
Casbin.NET Apache-2.0 An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#) ★ 1.3K ⤓ 2.7M -
NetEscapades Security Headers MIT Small package to allow adding security headers to ASP.NET Core websites ★ 853 ⤓ 20.3M -
NWebsec Inactive BSD-3-Clause Security libraries for ASP.NET ★ 549 ⤓ 24.5M -
AzureSignTool MIT SignTool Library and Azure Key Vault Support ★ 371 ⤓ 13.3M -
OwaspHeaders.Core MIT Inject OWASP recommended HTTP Headers for increased security in a single line ★ 315 ⤓ 2.2M -
reCAPTCHA for ASP.NET Core Legacy MIT reCAPTCHA 2.0 for ASPNET Core ★ 135 ⤓ 1.7M -
OpenFGA .NET SDK Apache-2.0 OpenFGA SDK for .NET ★ 86 ⤓ 4.3M -
Microsoft.AspNetCore.DataProtection (AWS SSM) ☁ Paid service Apache-2.0 An extension library to assist with ASP.NET data protection in AWS Lambda. ★ 72 ⤓ 19.1M