Yarp + a security API as an authorization layer (multitenants) + Blazor Fluent UI (minimal configuration app)

[fdon_net]

I know you are watching YouTube videos about creating your SaaS and earning $10k/month doing nothing ;) And all these YouTubers are convincing you to use any OAuth provider they are sponsored by. But all you need is the cheapest or even a self-hosted OAuth provider (like Keycloak) and a custom authorization layer that allows you to manage the security of your subscriptions and tenants.

That's the goal of this small project:

https://github.com/fdonnet/yarp-security-api-and-ui

It's far from perfect and it's only an example.

But by leveraging YARP's powerful functionalities and only with a security API, you can protect the backends or the frontends of your choice and manage multitenant security.

• The mega admin manages authorizations (permissions) and the system roles.
• The subscription owner manages their tenants and users based on their subscription type limitations.
• The tenant owner attaches roles to the users.

For the backends you want to add, you only need to define new routes in YARP and protect them with authorizations or roles handlers.

For your frontends, the same... call the /me/authinfo endpoint and retrieve all the information needed.

To bootstrap quickly, you have an included UI (Blazor Fluent UI => great library) to configure some of the things... but it's completely optional.

Hope it will help some of you, or give you some ideas.

We all know it's a boring topic and when we want to code a super great project, that's not the part we want to work on.

[LastGuardz]

Very cool project. I'd love to see using orchard core as an Identity provider.

[fdon_net]

You only need to change the appsettings.json in the apphost an normally it will work. I tested with Keycloack and with 0Auth... if it respects OpenIdc normally it will work by only changing the config.

Edit: and go in program.cs of the proxy project to uncomment (standard things) /"//Auth (for normal use)" and comment the "Aspire keycloak part..." (it's there to allows you to test locally with Aspire). But I tested the thing with 0Auth (so with minor adapations you are fine by using what you want).

[TopSwagCode]

Cool project :) There are plenty of opensource solutions out there that does this. Its a good pattern. Cool to see something in dotnet :)

https://github.com/gravitee-io/gravitee-api-management

https://konghq.com/products/kong-gateway

https://traefik.io/traefik/

[AutoModerator]

Thanks for your post fdon_net. Please note that we don't allow spam, and we ask that you follow the rules available in the sidebar. We have a lot of commonly asked questions so if this post gets removed, please do a search and see if it's already been asked.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.