SimpleAuthB2C 1.0.0

SimpleAuthB2C

🚀 Simplified Azure B2C Authentication for ASP.NET Core

A lightweight, configuration-driven wrapper around Microsoft.Identity.Web that reduces Azure B2C setup from 50+ lines of code to just 1 line.

✨ Features

• One-line setup - services.AddSimpleAuthB2C(configuration)
• Configuration-driven - No boilerplate code, just JSON config
• Production-ready - Built on Microsoft.Identity.Web with smart defaults
• Zero magic - Clear, predictable, follows ASP.NET Core patterns
• Extensible - Full access to underlying authentication builder

🎯 Benefits

🚀 Quick Start

1. Install Package

dotnet add package SimpleAuthB2C

2. Configure (appsettings.json)

{
  "SimpleAuthB2C": {
    "Enabled": true,
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "yourcompany.b2clogin.com",
    "TenantId": "your-tenant-id",
    "ClientId": "your-client-id",
    "ClientSecret": "your-client-secret",
    "SignUpSignInPolicyId": "B2C_1_SignUpSignIn",
    "Scopes": ["openid", "profile", "offline_access"]
  }
}

3. Setup (Program.cs)

// Add authentication
builder.Services.AddSimpleAuthB2C(builder.Configuration);

var app = builder.Build();

// Configure pipeline
app.UseSimpleAuthB2C();
app.MapSimpleAuthB2C();

app.Run();

That's it! 🎉

📋 Complete Configuration Reference

{
  "SimpleAuthB2C": {
    "Enabled": true,
    "Instance": "https://login.microsoftonline.com/",
    "Domain": "yourcompany.b2clogin.com",
    "TenantId": "your-tenant-id",
    "ClientId": "your-client-id",
    "ClientSecret": "your-client-secret",
    "SignUpSignInPolicyId": "B2C_1_SignUpSignIn",
    "ResetPasswordPolicyId": "B2C_1_PasswordReset",
    "EditProfilePolicyId": "B2C_1_EditProfile",
    "CallbackPath": "/signin-oidc",
    "SignedOutCallbackPath": "/signout-callback-oidc",
    "Scopes": ["openid", "profile", "offline_access"],
    "Session": {
      "CookieName": "SimpleAuthB2C.Session",
      "TimeoutMinutes": 60,
      "SlidingExpiration": true,
      "HttpOnly": true,
      "Secure": true,
      "SameSite": "Lax"
    },
    "Cors": {
      "Enabled": true,
      "AllowedOrigins": ["https://yourapp.com", "https://localhost:3000"],
      "AllowedMethods": ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
      "AllowedHeaders": ["Authorization", "Content-Type", "Accept"],
      "AllowCredentials": true
    }
  }
}

🔐 Security Best Practices

Azure Key Vault Integration

{
  "SimpleAuthB2C": {
    "TenantId": "${AZURE_B2C_TENANT_ID}",
    "ClientId": "${AZURE_B2C_CLIENT_ID}",
    "ClientSecret": "${AZURE_B2C_CLIENT_SECRET}"
  }
}

Environment-Specific Configuration

Development (appsettings.Development.json):

{
  "SimpleAuthB2C": {
    "Domain": "yourcompany-dev.b2clogin.com",
    "Session": { "Secure": false },
    "Cors": { "AllowedOrigins": ["https://localhost:3000"] }
  }
}

Production (appsettings.Production.json):

{
  "SimpleAuthB2C": {
    "Domain": "yourcompany.b2clogin.com",
    "Session": { "Secure": true },
    "Cors": { "AllowedOrigins": ["https://yourapp.com"] }
  }
}

🛠️ Authentication Endpoints

SimpleAuthB2C automatically provides these endpoints:

• GET /auth/login - Initiate login flow
• GET /auth/logout - Sign out user
• GET /auth/reset-password - Password reset flow
• GET /auth/edit-profile - Profile editing flow
• GET /auth/user - Get current user info
• GET /auth/error - Authentication error page

🔧 Advanced Usage

Custom Configuration

builder.Services.AddSimpleAuthB2C(builder.Configuration, options =>
{
    options.Scopes = new[] { "openid", "profile", "email", "offline_access" };
    options.Session.TimeoutMinutes = 120;
    options.Cors.AllowedOrigins = new[] { "https://custom-domain.com" };
});

Integration with Authorization Policies

builder.Services.AddAuthorization(options =>
{
    options.AddPolicy("RequireAuthenticated", policy =>
        policy.RequireAuthenticatedUser());
        
    options.AddPolicy("RequireAdmin", policy =>
        policy.RequireRole("Admin"));
});

// Use in controllers
[Authorize(Policy = "RequireAuthenticated")]
public class HomeController : Controller
{
    // Your controller actions
}

🏗️ Architecture

SimpleAuthB2C is a thin wrapper around Microsoft.Identity.Web that:

1. Follows ASP.NET Core patterns - Uses standard configuration and DI
2. Respects configuration precedence - Environment variables > appsettings.json
3. Provides smart defaults - Minimal configuration required
4. Maintains full compatibility - Access to underlying AuthenticationBuilder

🆚 Comparison with Raw Microsoft.Identity.Web

Before (Microsoft.Identity.Web):

builder.Services.AddAuthentication(OpenIdConnectDefaults.AuthenticationScheme)
    .AddMicrosoftIdentityWebApp(options =>
    {
        options.Instance = "https://login.microsoftonline.com/";
        options.Domain = "yourcompany.b2clogin.com";
        options.TenantId = "your-tenant-id";
        options.ClientId = "your-client-id";
        options.ClientSecret = "your-client-secret";
        options.SignUpSignInPolicyId = "B2C_1_SignUpSignIn";
        options.ResetPasswordPolicyId = "B2C_1_PasswordReset";
        options.EditProfilePolicyId = "B2C_1_EditProfile";
        options.CallbackPath = "/signin-oidc";
        options.SignedOutCallbackPath = "/signout-callback-oidc";
        options.ResponseType = OpenIdConnectResponseType.Code;
        options.Scope.Add("openid");
        options.Scope.Add("offline_access");
        options.TokenValidationParameters.NameClaimType = "name";
        options.Events = new OpenIdConnectEvents
        {
            OnRedirectToIdentityProvider = context =>
            {
                // Custom policy handling
                return Task.CompletedTask;
            },
            OnRemoteFailure = context =>
            {
                // Error handling
                return Task.CompletedTask;
            }
        };
    })
    .EnableTokenAcquisitionToCallDownstreamApi()
    .AddInMemoryTokenCaches();

builder.Services.AddSession(/* ... */);
builder.Services.AddCors(/* ... */);

// Pipeline setup
app.UseSession();
app.UseCors("Policy");
app.UseAuthentication();
app.UseAuthorization();

After (SimpleAuthB2C):

builder.Services.AddSimpleAuthB2C(builder.Configuration);

app.UseSimpleAuthB2C();
app.MapSimpleAuthB2C();

📖 Documentation

• Configuration Reference
• Security Guide
• Migration Guide
• Troubleshooting

🤝 Contributing

Contributions welcome! Please read our Contributing Guide.

📄 License

MIT License - see LICENSE file for details.

🆘 Support

• GitHub Issues
• Documentation
• Examples