🚀 Quick Start

April 19, 2026 · View on GitHub

License

📑 Table of Contents

🗺 Roadmap
🌟 Why UltimateAuth
🚀 Quick Start
💡 Usage
📘 Documentation
🤝 Contributing
⭐ Acknowledgements

UltimateAuth is an open-source auth framework with platform-level capabilities that unifies secure session, cookie and token based Auth, modern PKCE flows, Blazor/Maui-ready client experiences - eliminating the complexity of traditional Auth systems while providing a clean, lightweight, extensible and developer-first architecture.

🗺 Roadmap

Phase	Version	Scope	Status	Release Date
First Preview	0.1.0-preview	"Stable" Preview Core	✅ Completed	07.04.2026
First Release*	0.1.0	Fully Documented & Quality Tested	🟡 In Progress	Q2 2026
Product Expansion	0.2.0	Full Auth Modes	🟡 In Progress	Q2 2026
Security Expansion	0.3.0	MFA, Reauth, Rate Limiting	🔜 Planned	Q2 2026
Infrastructure Expansion	0.4.0	Redis, Distributed Cache, Password Hasher	🔜 Planned	Q2 2026
Multi-Tenant Expansion	0.5.0	Multi tenant management	🔜 Planned	Q3 2026
Extensibility Expansion	0.6.0	Audit, events, hooks	🔜 Planned	Q3 2026
Performance Expansion	0.7.0	Benchmarks, caching	🔜 Planned	Q3 2026
Ecosystem Expansion	0.8.0	Migration tools	🔜 Planned	Q4 2026
v1.0	1.0.0	Locked API, align with .NET 11	🔜 Planned	Q4 2026

*v 0.1.0 already provides a skeleton of multi tenancy, MFA, reauth etc. Expansion releases will enhance these areas.

The project roadmap is actively maintained as a GitHub issue:

👉 https://github.com/CodeBeamOrg/UltimateAuth/issues/8

We keep it up-to-date with current priorities, planned features, and progress. Feel free to follow, comment, or contribute ideas.

UltimateAuth is currently in the final stage of the first preview release (v 0.1.0-preview).

Core architecture is complete and validated through working samples.

Ongoing work:

Final API surface review

Developer experience improvements

EF Core integration polishing

Documentation refinement

🌟 Why UltimateAuth

The Six-Point Principles

1) Unified Authentication System

One solution, one mental model — across Blazor Server, WASM, MAUI, and APIs. UltimateAuth eliminates fragmentation by handling client differences internally and exposing a single, consistent API.

2) Plug & Play Ready

Built-in capabilities designed for real-world scenarios:

Automatic client profile detection (blazor server - WASM - MAUI)
Selectable authentication modes (Session / Token / Hybrid / SemiHybrid)
Device-aware sessions
PKCE flows out of the box
Unified session + token lifecycle
Event-driven extensibility

No boilerplate. No hidden complexity.

3) Developer-Centric

Clean APIs, predictable behavior, minimal ceremony — designed to make authentication pleasant.

4) Security as a First-Class Concern

Modern security built-in by default:

PKCE support
Session reuse detection
Device tracking
Hardened auth flows
Safe defaults with extensibility

5) Extensible & Lightweight

Start simple, scale infinitely:

Works out of the box with sensible defaults
Replace any component when needed
No forced architecture decisions

6) Built for Modern .NET Applications

Designed specifically for real-world .NET environments:

Blazor Server
Blazor WASM
.NET MAUI
Backend APIs

Traditional auth solutions struggle here — UltimateAuth embraces it.

🚀 Quick Start

⏱ Takes ~2 minutes to get started

1) Install packages

1.1 Core Packages

dotnet add package CodeBeam.UltimateAuth.Server
dotnet add package CodeBeam.UltimateAuth.Client.Blazor

1.2 Persistence & Reference Packages (Choose One)

dotnet add package CodeBeam.UltimateAuth.InMemory.Bundle (for debug & development)
dotnet add package CodeBeam.UltimateAuth.EntityFrameworkCore.Bundle (for production)

2) Configure services (in program.cs)

Server registration:

builder.Services
    .AddUltimateAuthServer()
    .AddUltimateAuthEntityFrameworkCore(db =>
    {
        // use with your database provider
        db.UseSqlite("Data Source=uauth.db");
    });

// OR

builder.Services
    .AddUltimateAuthServer()
    .AddUltimateAuthInMemory(); // Development

Client registration:

builder.Services.AddUltimateAuthClientBlazor();

Usage by application type:

Blazor Server App → Use both Server and Client registrations
Blazor WASM / MAUI → Use Client only
Auth Server / Resource API → Use Server only

3) Configure pipeline

// app.UseHttpsRedirection();
// app.UseStaticFiles();

app.UseUltimateAuthWithAspNetCore(); // Includes UseAuthentication() and UseAuthorization()
// Place Antiforgery or something else needed
app.MapUltimateAuthEndpoints();

app.MapRazorComponents<App>()
    .AddInteractiveServerRenderMode()
    .AddUltimateAuthRoutes(UAuthAssemblies.BlazorClient());

4) Add UAuth Script

Place this in App.razor or index.html in your Blazor client application:

<script src="_content/CodeBeam.UltimateAuth.Client.Blazor/uauth.min.js"></script>

5) 🗄️ Database Setup (EF Core)

After configuring UltimateAuth with Entity Framework Core, you need to create and apply database migrations.

5.1) Install EF Core tools (if not installed)

dotnet tool install --global dotnet-ef

5.2) Add migration

dotnet ef migrations add InitUAuth

5.3) Update database

dotnet ef database update

💡 Visual Studio (PMC alternative)

If you are using Visual Studio, you can run these commands in Package Manager Console:

Add-Migration InitUAuth -Context UAuthDbContext
Update-Database -Context UAuthDbContext

⚠️ Notes

Migrations must be created in your application project, not in the UltimateAuth packages
You are responsible for managing migrations in production
Automatic database initialization is not enabled by default

6) Optional: Blazor Usings

Add this in _Imports.razor

@using CodeBeam.UltimateAuth.Client.Blazor

✅ Done

💡 Usage

Inject IUAuthClient and simply call methods.

Examples

[Inject] IUAuthClient UAuthClient { get; set; } = null!;

private async Task Login()
{
    var request = new LoginRequest
    {
        Identifier = "UAuthUser",
        Secret = "UAuthPassword",
    };
    await UAuthClient.Flows.LoginAsync(request);
}

[Inject] IUAuthClient UAuthClient { get; set; } = null!;

private async Task Register()
{
    var request = new CreateUserRequest
    {
        UserName = _username,
        Password = _password,
        Email = _email,
    };

    var result = await UAuthClient.Users.CreateAsync(request);
    if (result.IsSuccess)
    {
        Console.WriteLine("User created successfully.");
    }
    else
    {
        Console.WriteLine(result.ErrorText ?? "Failed to create user.");
    }
}

LogoutAll But Keep Current Device

[Inject] IUAuthClient UAuthClient { get; set; } = null!;

private async Task LogoutOthersAsync()
{
    var result = await UAuthClient.Flows.LogoutMyOtherDevicesAsync();
    Console.WriteLine(result.IsSuccess);
}

UltimateAuth turns Auth into a simple application service — not a separate system you fight against.

No manual token handling
No custom HTTP plumbing
No fragile redirect logic
All built-in with extensible options.

🚀 Quick Start

📑 Table of Contents

🗺 Roadmap

🌟 Why UltimateAuth

1) Unified Authentication System

2) Plug & Play Ready

3) Developer-Centric

4) Security as a First-Class Concern

5) Extensible & Lightweight

6) Built for Modern .NET Applications

🚀 Quick Start

1) Install packages

2) Configure services (in program.cs)

3) Configure pipeline

4) Add UAuth Script

5) 🗄️ Database Setup (EF Core)

6) Optional: Blazor Usings

✅ Done

💡 Usage

Examples

📘 Documentation

1) Classic Documentation

2) Interactive Identity Sandbox (Available Soon)

🤝 Contributing

⭐ Acknowledgements