.NET
.NET library
The HmacManager NuGet package. It signs outgoing requests, verifies incoming
ones, or both, and targets net8.0 and net10.0.
dotnet add package HmacManagerRegistration
AddHmacManager versus AddHmac, and which one you want.
Authorization
Requiring a specific policy or scheme on an endpoint.
Configuration binding
Declaring policies in appsettings.json instead of code.
HttpClient
Sign every outgoing request from a named client automatically.
Events
Hooks in the authentication handler — key validation, success and failure.
Dynamic policies
Changing the policy set at runtime, or resolving it per request from a store.
Custom signing content
Replacing the default signing string, and what you take responsibility for.
Custom nonce cache
Backing replay protection with a store of your own, and the one operation it must provide.
Redis nonce cache
Atomic replay protection across instances, from the HmacManager.StackExchangeRedis package.
Logging
Categories, levels, and how to find the cause of a signature mismatch.