What is the difference between 'Authenticate' and 'Authorize' modes?

'Authenticate' mode requires only a valid JWT to access the API, while 'Authorize' mode requires both a valid token and specific Keycloak RPT permissions.

Does this skill help with claims management?

Yes, it automatically enriches user identities with standard JWT claims, aggregated roles, and RPT permissions when using Authorization mode.

What authentication providers are supported?

While optimized for Keycloak integration, the skill configures standard JWT Bearer validation compatible with most OIDC-compliant identity providers.

How do I handle multiple permissions in my controllers?

You can use the Authorize attribute with comma-separated policies; the system will grant access if any of the specified permissions match.

JWT Bearer Authentication for affolterNET

Name: JWT Bearer Authentication for affolterNET
Author: Mcafee123

byMcafee123

API 开发

Configures secure JWT Bearer authentication and Keycloak integration for .NET Web APIs using the affolterNET framework.

关于

The jwt-auth skill streamlines the implementation of identity management and access control within affolterNET.Web.Api projects. It provides a standardized way to configure OIDC providers like Keycloak, supporting multiple authentication modes ranging from basic token validation to complex RPT-based permission checks. By automating the setup of claims enrichment and policy-based authorization, this skill ensures that developers can quickly secure their backend services using industry-standard security patterns and robust integration logic.

主要功能

Configurable authentication modes (None, Authenticate, Authorize)
Automatic claims enrichment and role aggregation
Seamless Keycloak OIDC integration
Policy-based authorization with Keycloak RPT permissions
Standardized configuration for appsettings.json and Program.cs
0 GitHub stars

使用场景

Implementing fine-grained resource permissions using RPT tokens
Setting up standardized JWT validation for microservices
Securing a .NET Web API with Keycloak identity management

关于

主要功能

Configurable authentication modes (None, Authenticate, Authorize)
Automatic claims enrichment and role aggregation
Seamless Keycloak OIDC integration
Policy-based authorization with Keycloak RPT permissions
Standardized configuration for appsettings.json and Program.cs
0 GitHub stars

使用场景

Implementing fine-grained resource permissions using RPT tokens
Setting up standardized JWT validation for microservices
Securing a .NET Web API with Keycloak identity management