Getting Started

dotnet add package SqlOS

using Microsoft.EntityFrameworkCore;
using SqlOS;
using SqlOS.Extensions;
 
var builder = WebApplication.CreateBuilder(args);
 
var connectionString = builder.Configuration.GetConnectionString("DefaultConnection")
    ?? throw new InvalidOperationException("Connection string 'DefaultConnection' was not configured.");
 
builder.AddSqlOS<AppDbContext>(
    db => db.UseSqlServer(connectionString),
    options =>
    {
        options.AuthServer.Issuer = "https://localhost:5001/sqlos/auth";
        options.AuthServer.PublicOrigin = "https://localhost:5001";
        options.AuthServer.SeedOwnedWebApp(
            "web",
            "My Application",
            "https://localhost:5001/auth/callback");
    });
 
var app = builder.Build();
app.MapSqlOS();
app.Run();

public sealed class AppDbContext(DbContextOptions<AppDbContext> options)
    : SqlOSDbContext<AppDbContext>(options)
{
    public DbSet<Project> Projects => Set<Project>();
 
    protected override void OnApplicationModelCreating(ModelBuilder modelBuilder)
    {
        modelBuilder.Entity<Project>();
    }
}

{
  "ConnectionStrings": {
    "DefaultConnection": "Server=localhost;Database=SqlOSApp;Trusted_Connection=True;TrustServerCertificate=True"
  },
  "SqlOS": {
    "Dashboard": {
      "AuthMode": "Password",
      "Password": "change-me-in-production"
    }
  }
}

var app = builder.Build();
app.MapSqlOS();

options.AuthServer.SeedOwnedWebApp(
    "my-app",
    "My Application",
    "http://localhost:3000/auth/callback");

var api = app.MapGroup("/api")
    .RequireSqlOSAccessToken(options =>
    {
        options.ExpectedAudience = "https://localhost:5001/api";
        options.ResourceMetadataUrl = "https://localhost:5001/.well-known/oauth-protected-resource";
    });
 
api.MapGet("/me", (HttpContext http) =>
{
    var subjectId = http.User.FindFirst(JwtRegisteredClaimNames.Sub)?.Value;
    if (string.IsNullOrWhiteSpace(subjectId))
        return Results.Unauthorized();
 
    return Results.Ok(new
    {
        subjectId,
        clientId = http.User.FindFirst("client_id")?.Value,
        audience = http.User.FindFirst(JwtRegisteredClaimNames.Aud)?.Value
    });
});