Skip to content

Commit de332a6

Browse files
committed
Updates ReadMe
1 parent 2d1d1cf commit de332a6

1 file changed

Lines changed: 16 additions & 1 deletion

File tree

README.md

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
![Downloads](https://img.shields.io/nuget/dt/Auth0.AspNetCore.Authentication.Api)
99
[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/auth0/aspnetcore-api)
1010

11-
A library that provides **everything the standard JWT Bearer authentication offers**, with the added power of **built-in DPoP (Demonstration of Proof-of-Possession)** support for enhanced token security. Simplify your Auth0 JWT authentication integration for ASP.NET Core APIs with Auth0-specific configuration and validation.
11+
A library that provides **everything the standard JWT Bearer authentication offers**, with the added power of **built-in DPoP (Demonstration of Proof-of-Possession)** support for enhanced token security and **Multiple Custom Domains** support for multi-tenant architectures. Simplify your Auth0 JWT authentication integration for ASP.NET Core APIs with Auth0-specific configuration and validation.
1212

1313
## Table of Contents
1414

@@ -24,6 +24,7 @@ A library that provides **everything the standard JWT Bearer authentication offe
2424
- [DPoP Configuration Options](#dpop-configuration-options)
2525
- [DPoP Modes](#dpop-modes)
2626
- [Advanced Features](#advanced-features)
27+
- [Multiple Custom Domains Support](#multiple-custom-domains-support)
2728
- [Using Full JWT Bearer Options](#using-full-jwt-bearer-options)
2829
- [Examples](#examples)
2930
- [Development](#development)
@@ -40,6 +41,7 @@ This library builds on top of the standard `Microsoft.AspNetCore.Authentication.
4041

4142
- **Complete JWT Bearer Functionality** - All features from `Microsoft.AspNetCore.Authentication.JwtBearer` are available
4243
- **Built-in DPoP Support** - Industry-leading proof-of-possession token security per [RFC 9449](https://datatracker.ietf.org/doc/html/rfc9449)
44+
- **Multiple Custom Domains** - Accept tokens from multiple Auth0 Custom Domains.
4345
- **Auth0 Optimized** - Pre-configured for Auth0's authentication patterns
4446
- **Zero Lock-in** - Use standard JWT Bearer features alongside DPoP enhancements
4547
- **Single Package** - Everything you need in one dependency
@@ -252,6 +254,19 @@ Choose the right enforcement mode for your security requirements:
252254
253255
## Advanced Features
254256

257+
### Multiple Custom Domains Support
258+
259+
For multi-tenant architectures where your API needs to accept tokens from multiple Auth0 custom domains, this library provides seamless support without requiring separate authentication schemes or complex configuration.
260+
261+
**Key capabilities:**
262+
- **Static Domain Lists** - Configure a fixed set of allowed Auth0 domains at startup
263+
- **Dynamic Domain Resolution** - Resolve allowed domains at runtime based on request context, database queries, or external APIs
264+
- **Automatic OIDC Discovery** - Handles OIDC metadata and JWKS fetching per domain with built-in caching
265+
- **Performance Optimized** - In-memory cache with configurable expiration reduces network calls
266+
- **Security First** - Validates token issuer before any network calls, rejects symmetric algorithms
267+
268+
> **See code examples:** For complete implementation examples including static configuration, dynamic domain resolution, cache configuration, and SaaS integration patterns, see [EXAMPLES.md - Multiple Custom Domains](./EXAMPLES.md#multiple-custom-domains).
269+
255270
### Using Full JWT Bearer Options
256271

257272
Since this library provides **complete access to JWT Bearer configuration**, you can use any standard JWT Bearer option:

0 commit comments

Comments
 (0)