Soenneker.Hangfire.BasicAuthentication 11.0.2210

Prefix Reserved
.NET 11.0 This package targets .NET 11.0. The package is compatible with this framework or higher.
There is a newer version of this package available.
See the version list below for details. 
dotnet add package Soenneker.Hangfire.BasicAuthentication --version 11.0.2210
                    


                    

                
NuGet\Install-Package Soenneker.Hangfire.BasicAuthentication -Version 11.0.2210
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Soenneker.Hangfire.BasicAuthentication" Version="11.0.2210" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="Soenneker.Hangfire.BasicAuthentication" Version="11.0.2210" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="Soenneker.Hangfire.BasicAuthentication" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add Soenneker.Hangfire.BasicAuthentication --version 11.0.2210
                    


                    

                
#r "nuget: Soenneker.Hangfire.BasicAuthentication, 11.0.2210"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package Soenneker.Hangfire.BasicAuthentication@11.0.2210
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=Soenneker.Hangfire.BasicAuthentication&version=11.0.2210
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=Soenneker.Hangfire.BasicAuthentication&version=11.0.2210
                    


                            Install as a Cake Tool

We recommend Flywheel for background jobs due to our concerns about Hangfire's approach to community collaboration and addressing security vulnerabilities.

These libraries will no longer receive new features. Dependencies will continue to be updated.

alternate text is missing from this package README image alternate text is missing from this package README image alternate text is missing from this package README image alternate text is missing from this package README image alternate text is missing from this package README image

Soenneker.Hangfire.BasicAuthentication

Protects a Hangfire dashboard with HTTP Basic authentication. The configured password is a PBKDF2 PHC record, so plaintext dashboard credentials do not need to be stored in application configuration.

Installation

dotnet add package Soenneker.Hangfire.BasicAuthentication

Configuration

{
  "Hangfire": {
    "Username": "admin",
    "PasswordPhc": "<PBKDF2 PHC record>",
    "LocalAuthenticationBypassEnabled": false,
    "Url": "/hangfire"
  }
}

Generate the PHC value once and store it in a secret provider:

using Soenneker.Hashing.Pbkdf2;

string passwordPhc = Pbkdf2HashingUtil.Hash("replace-with-a-strong-password");

Registration and middleware order

using Hangfire;
using Soenneker.Hangfire.BasicAuthentication;
using Soenneker.Hangfire.BasicAuthentication.Registrars;

builder.Services.AddHangfireBasicAuth();

app.UseHangfireAuthorized();

app.UseHangfireDashboard("/hangfire", new DashboardOptions
{
    Authorization = [new HangfireAuthorizationFilter()]
});

UseHangfireAuthorized() must appear before UseHangfireDashboard(), and Hangfire:Url must match the dashboard path. HangfireAuthorizationFilter deliberately allows Hangfire's internal authorization stage to continue because the preceding middleware performs the credential check; do not use that filter without the middleware.

Requests outside the configured dashboard path are unaffected. Matching requests without valid credentials receive 401 Unauthorized and a WWW-Authenticate: Basic challenge.

Enable LocalAuthenticationBypassEnabled only when every request considered local by the application is trusted. Basic authentication must be served over HTTPS because credentials are encoded, not encrypted, in the request header.

Product Compatible and additional computed target framework versions.
.NET net11.0 is compatible. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
11.0.2222 277 11/3/2026
11.0.2221 86 11/3/2026
11.0.2220 95 11/2/2026
11.0.2219 533 10/27/2026
11.0.2218 105 10/27/2026
11.0.2217 99 10/27/2026
11.0.2216 103 10/27/2026
11.0.2215 166 10/27/2026
11.0.2214 101 10/26/2026
11.0.2213 131 10/26/2026
11.0.2212 105 10/26/2026
11.0.2211 105 10/26/2026
11.0.2210 96 10/26/2026
11.0.2209 94 10/26/2026
4.0.2207 231 10/24/2026
4.0.2206 133 10/15/2026
4.0.2205 106 10/15/2026
4.0.2204 103 10/15/2026
4.0.2203 98 10/14/2026
4.0.2202 125 10/14/2026
Loading failed

Update dependency Soenneker.Validators.BasicAuth to v11 (#3040)