JWT Authentication Service

A backend API for handling JWT authentication built with ASP.NET Core and Entity Framework Core. Provides secure login, registration, token refresh, role-based access, and HTTP-only cookie management.

---

🚀 Features

• User registration and login
• Secure password hashing with BCrypt
• JWT token issuance and validation
• Token refresh mechanism with rotating refresh tokens
• Role-based access control
• HTTP-only cookie authentication
• Standardized API response wrapper
• Generic repository pattern
• RESTful API design
• Swagger API documentation
• Unit tests with xUnit and Moq

---

🧰 Tech Stack

Layer	Technology
Framework	ASP.NET Core (.NET 10)
Language	C#
Database	SQLite (via Entity Framework Core)
Authentication	JWT (JSON Web Token)
Testing	xUnit, Moq
Documentation	Swagger / Swashbuckle

---

🏗 Architecture

The project follows a layered architecture for clean separation of concerns.

Controller → Service → Repository → Database

• Controllers — handle HTTP requests and API responses
• Services — authentication logic, JWT generation, password hashing
• Repositories — generic data access via IRepository<T>
• Middleware — custom JWT token processing
• Models — domain entities, DTOs, and API response wrapper

---

📂 Project Structure

JwtAuthService/
│
├── Controllers/
│   └── AuthController.cs          # Register, login, refresh, logout, profile
│
├── Services/
│   └── AuthService.cs             # JWT generation, password hashing, refresh tokens
│
├── Repositories/
│   ├── IRepository.cs             # Generic repository interface
│   └── Repository.cs              # Generic repository implementation
│
├── Models/
│   ├── User.cs                    # User entity with refresh token fields
│   ├── Role.cs                    # Role constants
│   ├── AuthDtos.cs                # Request/response DTOs
│   └── ApiResponse.cs             # Standardized API response wrapper
│
├── Data/
│   └── AuthDbContext.cs           # EF Core database context
│
├── Middleware/
│   └── JwtMiddleware.cs           # Custom JWT processing middleware
│
├── Migrations/                    # EF Core database migrations
│
├── Tests/
│   └── AuthServiceTests.cs        # Unit tests for AuthService
│
├── Program.cs                     # App configuration, DI, CORS, JWT setup
├── appsettings.json               # App settings & connection strings
└── README.md

---

⚙️ Getting Started

Prerequisites

• .NET SDK 10 or later
• Visual Studio, VS Code, or Rider

Installation

# Clone the repository
git clone https://github.com/muisoft/jwt-auth-service-dotnet.git

# Navigate to the project folder
cd jwt-auth-service-dotnet

# Restore dependencies
dotnet restore

# Run the application
dotnet run

The API will be available at https://localhost:5001 with Swagger UI at /swagger.

---

📘 API Endpoints

Method	Endpoint	Description	Auth Required
POST	/user/register	Register a new user	No
POST	/user/authenticate	Login and receive tokens	No
POST	/user/refresh	Refresh JWT token	No
POST	/user/signout	Logout and clear cookies	No
GET	/user/me	Get current user profile	Yes

---

🔐 Authentication

The API supports two authentication methods:

1. HTTP-only Cookies (recommended for browsers): Tokens are automatically set as secure HTTP-only cookies on login.

2. Bearer Token (for API clients):

Authorization: Bearer <your_jwt_token>

---

🧪 Running Tests

dotnet test

---

📄 License

This project is licensed under the MIT License.

---

👤 Author

Muideen Adewale — Senior Software Engineer