Structr.Security package contains classes and extension methods that will help in organization application security infrastructure, such as encryption services and handy Claims extensions.


Abstractions package is available on NuGet.

dotnet add package Structr.Security



Claims extension methods are mostly extensions for ClaimsIdentity and collection of Claims that could simplify working with adding, changing and removing claims.

Samples for some of ClaimsIdentity extensions:

var claimsIdentity = new ClaimsIdentity();

// Add claims fluently without Claim constructors.
claimsIdentity.AddClaim("SomeClaimType", "1,25")
    .AddClaim("SomeClaimType", "3,57")
    .AddClaim("SomeAnotherClaimType", "value 1")
    .AddClaim("SomeAnotherClaimType", "value 2")
    .AddClaim("AndAnotherClaimType", "True");

// Replaces value for claim with type "SomeAnotherClaimType".
claimsIdentity.SetClaim("SomeAnotherClaimType", "1,25");

// Getting claim value converted to specified type. 
float someClaimValue = claimsIdentity.GetFirstClaim<float>("SomeClaimType"); // Returns 1.25F

// Removes claims with type "SomeClaimType".

// Getting all claims values as a string with type "SomeAnotherClaimType".
IEnumerable<string> someAnotherClaimValues = claimsIdentity.FindAllValues("SomeAnotherClaimType");

Samples for some of Claim and collection of Claim extensions:

var claims = new List<Claim>{ new Claim("Type1", "1,25"), new Claim("Type1", "3,57"), new Claim("Type2", "Value3") };

// Getting first claim with type "Type1".
Claim claim = claims.FindFirst("Type1"); // Returns `Claim("Type1", "1,25")`
// Get claim value
float claimValue = claim.GetValue<float>(); // Returns 1.25F

// Or getting first claim value with type "Type1" directly from collection.
claimValue = claims.GetFirstValue<float>("Type1");  // Returns 1.25F

// Or try getting claim value.
if (claims.TryGetFirstValue("Type1", out float value))
    claimValue = value;


Md5Hasher and Pbkdf2Hasher classes provides functionality for hashing input strings and verifying them.

Hashers methods:

Method nameReturn typeDescription



Hashes specified string using chosen hash algorithm.



Verifies provided input string with specified hash, using chosen hash algorithm.

Hash and verify password for example using PBKDF2 hash algorithm:

// Sign up new user or change user password.
string email = "";
string password = "qwerty";
string passwordHash = Pbkdf2Hasher.Hash(password); // Create password hash.
User user = new User(email, passwordHash);

// Sign in user with email and password.
string email = "";
string password = "qwerty";
User user = _dbContext.Users.FirstOrDefault(x => x.Email == email);
if (user != null) 
    bool isVerified = Pbkdf2Hasher.Verify(password, user.PasswordHash); // Verify input password with user password hash.
    if (isVerified)
        /* Some sign in logic */


StringEncryptor class provides functionality for encrypting and decrypting strings using passphrase.

StringEncryptor methods:

Method nameReturn typeDescription



Encrypts input string using specified passphrase.



Decrypts input encrypted string using specified passphrase.

Encrypt and decrypt secure settings for example:

string clientSecret = "4E46E591-987F-443A-96BA-38804D7E1617";
string passphrase = "Structr";

// Encrypt client secret with passphrase
string encryptedClientSecret = StringEncryptor.Encrypt(clientSecret, passphrase);
File.WriteAllText("secrets.config", encryptedClientSecret);

encryptedClientSecret = File.ReadlAllText("secrets.config"); 
// Decrypt client secret with passphrase
clientSecret = StringEncryptor.Decrypt(encryptedClientSecret, passphrase);

EncryptingJsonConverter class will be useful when using Newtonsoft.Json package for JSON serialization:

Define typed-class for settings:

using Newtonsoft.Json;
using Structr.Security.Json;

public class ClientSettings
    public string ClientId { get; set; }

    public string ClientSecret { get; set; }

Then serialize settings to JSON:

using Newtonsoft.Json;

var user = new User 
    ClientId = "6779ef20e75817b79602",
    ClientSecret = "4E46E591-987F-443A-96BA-38804D7E1617"
string encryptedJson = JsonConvert.SerializeObject(user, Formatting.Indented);
File.WriteAllText("secrets.json", encryptedJson);

Last updated