AuthCallout.Contracts 0.1.3

dotnet add package AuthCallout.Contracts --version 0.1.3
                    
NuGet\Install-Package AuthCallout.Contracts -Version 0.1.3
                    
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="AuthCallout.Contracts" Version="0.1.3" />
                    
For projects that support PackageReference, copy this XML node into the project file to reference the package.
<PackageVersion Include="AuthCallout.Contracts" Version="0.1.3" />
                    
Directory.Packages.props
<PackageReference Include="AuthCallout.Contracts" />
                    
Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.
paket add AuthCallout.Contracts --version 0.1.3
                    
#r "nuget: AuthCallout.Contracts, 0.1.3"
                    
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
#:package AuthCallout.Contracts@0.1.3
                    
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.
#addin nuget:?package=AuthCallout.Contracts&version=0.1.3
                    
Install as a Cake Addin
#tool nuget:?package=AuthCallout.Contracts&version=0.1.3
                    
Install as a Cake Tool

AuthCallout.Contracts

Shared contracts for nats-auth-callout-service, a NATS auth callout that validates OIDC tokens and mints scoped NATS user JWTs.

Reference this package from an application that connects through the callout or subscribes to messages from callout-authenticated clients. It is the single source of truth for the naming rules both sides must agree on:

  • AppSlug: application name to slug (ADR 0013), and from it every KV bucket name (DiscoveryBucket, AssertionsBucket, OidcTokensBucket, AssertionKeysBucket), the discovery key, KV key derivation (SanitizeKeySegment, DeriveKeySegment), and the scoped client inbox prefix (ClientInboxPrefix) the callout's grant requires.
  • AssertionClaims: the verified claims of a Callout-Identity assertion (id, sub, app, iss, exp).
  • The config model (Application, Profile, Grant, ...) and decision types the service itself uses.
var slug = AppSlug.From("notes");
var opts = new NatsOpts
{
    AuthOpts = new NatsAuthOpts { Token = oidcToken },
    InboxPrefix = slug.ClientInboxPrefix(subjectFromToken),
};

Docs: https://ryandanthony.github.io/nats-auth-callout-service/ (see Identity propagation).

Product Compatible and additional computed target framework versions.
.NET net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.
  • net10.0

    • No dependencies.

NuGet packages (2)

Showing the top 2 NuGet packages that depend on AuthCallout.Contracts:

Package Downloads
AuthCallout.Core

Decision core of nats-auth-callout-service: claims access, claim matching and grant templates. A dependency of AuthCallout.Identity, with no transport or storage dependencies.

AuthCallout.Identity

Identity primitives for nats-auth-callout-service: verify the signed Callout-Identity assertion (AssertionSigner.Verify), plus the OIDC token validator and JWKS cache the service uses.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
0.1.3 0 11/13/2026