FreshIdentity.Core 2.0.0-preview.0.2

This is a prerelease version of FreshIdentity.Core.
dotnet add package FreshIdentity.Core --version 2.0.0-preview.0.2
                    
NuGet\Install-Package FreshIdentity.Core -Version 2.0.0-preview.0.2
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="FreshIdentity.Core" Version="2.0.0-preview.0.2" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="FreshIdentity.Core" Version="2.0.0-preview.0.2" />
                    
Directory.Packages.props
<PackageReference Include="FreshIdentity.Core" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add FreshIdentity.Core --version 2.0.0-preview.0.2
                    
#r "nuget: FreshIdentity.Core, 2.0.0-preview.0.2"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package FreshIdentity.Core@2.0.0-preview.0.2
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=FreshIdentity.Core&version=2.0.0-preview.0.2&prerelease
                    
Install as a Cake Addin
#tool nuget:?package=FreshIdentity.Core&version=2.0.0-preview.0.2&prerelease
                    
Install as a Cake Tool

Identity and auth libraries for mere mortals.

Product Compatible and additional computed target framework versions.
.NET net9.0 is compatible.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 was computed.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

This package has no dependencies.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
2.0.0-preview.0.2 46 7/11/2026
2.0.0-preview.0.1 198 8/11/2025
1.0.19 470 4/4/2023
1.0.18 391 4/4/2023
1.0.17 363 4/4/2023
1.0.16 403 4/3/2023
1.0.12 401 3/17/2023
1.0.11 576 11/4/2022
1.0.10 559 11/3/2022
1.0.9 646 10/14/2022
1.0.8 599 8/31/2022
1.0.7 609 8/24/2022
1.0.6 601 8/24/2022
1.0.5 596 8/23/2022
1.0.4 604 8/22/2022
1.0.3 594 8/22/2022
1.0.2 631 8/22/2022
1.0.1 613 8/22/2022
1.0.0 581 8/20/2022

- Harden password, OAuth2, GitHub, forward-auth, cookie, session, antiforgery, redirect, and rate-limit handling.
- Use versioned PBKDF2-HMAC-SHA512 password hashes with automatic legacy-hash upgrades and a 12–256 character policy.
- Make account mutations atomic and concurrency-safe, with durable writes that do not publish failed changes.
- Add persistent Data Protection keys, protected bootstrap provisioning, non-root container storage, and deployment guidance.
- Redact stored credentials and provider payloads from administrative account responses; return new secrets only at creation.
- Require active global-admin API keys in the `Authorization` header and move CLI secrets out of command-line arguments.
- Align local, container, CI, and package metadata on .NET 9 and port 5555; gate releases on a clean build and test run.
- Expand regression coverage and contributor/security documentation while removing obsolete scripts and scratch credentials.
Breaking changes: administrative API credentials are header-only, account responses no longer expose stored secrets, and cookies are host-only unless `IdentityConfig__Domain` is explicitly configured.