Security

Structr.Security package contains classes and extension methods that will help in organization application security infrastructure, such as encryption services and handy Claims extensions.
Installation
Abstractions package is available on NuGet.
dotnet add package Structr.Security
Usage
​Claims​
​Hashes​
​Encryption​
Claims
Claims extension methods are mostly extensions for ClaimsIdentity and collection of Claims that could simplify working with adding, changing and removing claims.
Samples for some of ClaimsIdentity extensions:
var claimsIdentity = new ClaimsIdentity();
​
// Add claims fluently without Claim constructors.
claimsIdentity.AddClaim("SomeClaimType", "1,25")
    .AddClaim("SomeClaimType", "3,57")
    .AddClaim("SomeAnotherClaimType", "value 1")
    .AddClaim("SomeAnotherClaimType", "value 2")
    .AddClaim("AndAnotherClaimType", "True");
​
// Replaces value for claim with type "SomeAnotherClaimType".
claimsIdentity.SetClaim("SomeAnotherClaimType", "1,25");
​
// Getting claim value converted to specified type. 
float someClaimValue = claimsIdentity.GetFirstClaim<float>("SomeClaimType"); // Returns 1.25F
​
// Removes claims with type "SomeClaimType".
claimsIdentity.RemoveAllClaims("SomeClaimType");
​
// Getting all claims values as a string with type "SomeAnotherClaimType".
IEnumerable<string> someAnotherClaimValues = claimsIdentity.FindAllValues("SomeAnotherClaimType");
Samples for some of Claim and collection of Claim extensions:
var claims = new List<Claim>{ new Claim("Type1", "1,25"), new Claim("Type1", "3,57"), new Claim("Type2", "Value3") };
​
// Getting first claim with type "Type1".
Claim claim = claims.FindFirst("Type1"); // Returns `Claim("Type1", "1,25")`
// Get claim value
float claimValue = claim.GetValue<float>(); // Returns 1.25F
​
// Or getting first claim value with type "Type1" directly from collection.
claimValue = claims.GetFirstValue<float>("Type1");  // Returns 1.25F
​
// Or try getting claim value.
if (claims.TryGetFirstValue("Type1", out float value))
{
    claimValue = value;
}
Hashes
Md5Hasher and Pbkdf2Hasher classes provides functionality for hashing input strings and verifying them.
Hashers methods:
Method name
Return type
Description
Hash
string
Hashes specified string using chosen hash algorithm.
Verify
bool
Verifies provided input string with specified hash, using chosen hash algorithm.
Hash and verify password for example using PBKDF2 hash algorithm:
// Sign up new user or change user password.
string email = "[email protected]";
string password = "qwerty";
string passwordHash = Pbkdf2Hasher.Hash(password); // Create password hash.
User user = new User(email, passwordHash);
_dbContext.Users.Add(user);
​
// Sign in user with email and password.
string email = "[email protected]";
string password = "qwerty";
User user = _dbContext.Users.FirstOrDefault(x => x.Email == email);
if (user != null) 
{
    bool isVerified = Pbkdf2Hasher.Verify(password, user.PasswordHash); // Verify input password with user password hash.
    if (isVerified)
    {
        /* Some sign in logic */
    }
}
Encryption
StringEncryptor class provides functionality for encrypting and decrypting strings using passphrase.
StringEncryptor methods:
Method name
Return type
Description
Encrypt
string
Encrypts input string using specified passphrase.
Decrypt
string
Decrypts input encrypted string using specified passphrase.
Encrypt and decrypt secure settings for example:
string clientSecret = "4E46E591-987F-443A-96BA-38804D7E1617";
string passphrase = "Structr";
​
// Encrypt client secret with passphrase
string encryptedClientSecret = StringEncryptor.Encrypt(clientSecret, passphrase);
File.WriteAllText("secrets.config", encryptedClientSecret);
​
encryptedClientSecret = File.ReadlAllText("secrets.config"); 
// Decrypt client secret with passphrase
clientSecret = StringEncryptor.Decrypt(encryptedClientSecret, passphrase);
EncryptingJsonConverter class will be useful when using Newtonsoft.Json package for JSON serialization:
Define typed-class for settings:
using Newtonsoft.Json;
using Structr.Security.Json;
​
public class ClientSettings
{
    public string ClientId { get; set; }
​
    [JsonConverter(typeof(EncryptingJsonConverter))]
    public string ClientSecret { get; set; }
}
Then serialize settings to JSON:
using Newtonsoft.Json;
​
var user = new User 
{ 
    ClientId = "6779ef20e75817b79602",
    ClientSecret = "4E46E591-987F-443A-96BA-38804D7E1617"
};
string encryptedJson = JsonConvert.SerializeObject(user, Formatting.Indented);
File.WriteAllText("secrets.json", encryptedJson);
Breadcrumbs
Next - Domain
Domain
Last modified 2mo ago
Copy link
Edit on GitHub
On this page
Installation
Usage
Claims
Hashes
Encryption