Identity

Packages

Package	Maturity	What it brings
Cephalon.Identity	M2	Host-agnostic identity + authorization primitives. Principal model, scope/role decisions, claim contracts.
Cephalon.Identity.AspNetCore	M2	AspNetCore adapter — wires the principal from the HTTP context, plugs into the behavior pipeline.
Cephalon.Audit	M2	Host-agnostic audit recording + runtime catalog. Tamper-evident audit trail.
Cephalon.Audit.EntityFramework	M2	EF-backed durable audit storage.

How to enable

appsettings.json

{
  "Engine": {
    "Identity": { "Enabled": true, "Provider": "Bearer", "Authority": "https://login.acme.example/" },
    "Audit": { "Enabled": true, "Provider": "EntityFramework" }
  }
}

Program.cs

builder.Services
    .AddCephalonAspNetCore()
    .AddIdentity(options => options.UseBearer("https://login.acme.example/"))
    .AddAudit(options => options.UseEntityFramework<AuditDbContext>())
    .AddModulesFromAssemblies(/* ... */);

Behavior-level authorisation

Behaviors/DeleteProductBehavior.cs

public RestRoute Route => RestRoute.Delete("/products/{id}")
    .WithRequireScope("products:write")
    .WithRequireRole("admin");

The behavior pipeline rejects unauthorised callers before the handler runs and emits an audit entry with the principal, the failed claim, and the trace context.

Source-doc snapshots

• Cephalon.Identity
• Cephalon.Identity.AspNetCore
• Cephalon.Audit
• Cephalon.Audit.EntityFramework

Cross-references

• Reference → Configuration → Identity — Engine:Identity schema, Bearer/Cookie auth, JWT validation, claim mapping.
• Reference → Architecture — canonical contracts index (the dedicated Identity contract page is planned for 0.2.0-preview).
• Tutorial → Multi-tenant SaaS — identity in a multi-tenant world.