SecureFetch.AspNetCore 8.0.0

SecureFetch.AspNetCore (.NET)

SecureFetch.AspNetCore enables encrypted, obfuscated API access in ASP.NET Core using a middleware proxy approach.

Features

• 🔐 AES-256-CBC encrypted URLs and bodies using shared secret
• 🎯 Middleware decrypts and forwards to actual controller routes
• 🧩 Use [SecureFetch] attribute to mark endpoints as secure
• 🪄 No changes to existing route logic or controllers
• 🔁 Optional override of /secure base route

Installation

Install via NuGet Package Manager:

Install-Package SecureFetch.AspNetCore

Or via .NET CLI:

dotnet add package SecureFetch.AspNetCore

Usage

1. Add the following to appsettings.json

{
    "SecureFetch":{
        "SharedSecret": "your-shared-secret",
        "BasePath": "/secure" // Optional, defaults to /secure"
    }
}

2. Register services and middleware in Program.cs

using SecureFetch.AspNetCore;

var builder = WebApplication.CreateBuilder(args);
// Register SecureFetch services
builder.Services.AddSecureFetch(options =>
{
    options.SharedSecret = builder.Configuration["SecureFetch:Secret"] ?? "try-not-to-laugh"; // Do not explicitly write secret in code
    options.BasePath = builder.Configuration["SecureFetch:BasePath"] ?? "/secure";
});

// Ensure CORS is configured
builder.Services.AddCors(options =>
{
    options.AddPolicy("AllowAll", policy =>
    {
        policy.AllowAnyOrigin()
              .AllowAnyHeader()
              .AllowAnyMethod();
    });
});

builder.Services.AddControllers();

var app = builder.Build();
app.UseCors("AllowAll");
app.UseSecureFetch(); // Adds decryption + proxy middleware add at the beginning of the pipeline
app.UseRouting(); // Add routing middleware
app.UseAuthorization(); // Adds authorization middleware if needed
app.MapControllers();
app.Run();

3. Decorate secure endpoints with [SecureFetch]

using Microsoft.AspNetCore.Mvc;
using SecureFetch.AspNetCore;

[ApiController]
[Route("api/[controller]")]
public class ValuesController : ControllerBase
{
    [HttpGet("{id}")]
    [SecureFetch]
    public IActionResult GetValue(int id)
    {
        return Ok(new { Id = id, Message = "This was securely fetched." });
    }

    [HttpPost]
    [SecureFetch]
    public IActionResult PostValue([FromBody] MyModel model)
    {
        return CreatedAtAction(nameof(GetValue), new { id = model.Id }, model);
    }

    [HttpGet("open")]
    public IActionResult OpenEndpoint() => Ok("No encryption required");
}

Your encrypted URL will then use:

http://localhost:5000/secure/{encrypted-string}

Author

Created and Maintained by: Ethern-Myth

Give a like to this project, Thanks.