C# SDK

Authdog.Sdk 0.2.0 is the official C# client for the Authdog REST API. The project targets net8.0. Source is `csharp/` in authdog/sdk. It is a management and userinfo client, not a web-framework session binding.

NuGet.org does not host this package.

Install

Reference the project from a checkout of the monorepo:

<ProjectReference Include="path/to/sdk/csharp/Authdog.Sdk.csproj" />

Or pack it locally and add the nupkg:

dotnet pack sdk/csharp/Authdog.Sdk.csproj

The package id is Authdog.Sdk. It depends on Newtonsoft.Json and Microsoft.Extensions.Http.

Configure

Construct one client with the public API base URL. Pass a management Bearer credential (ad_…) when you call privileged endpoints. Dispose the client when you are done:

using Authdog;

using var client = new AuthdogClient(
    "https://api.authdog.com",
    Environment.GetEnvironmentVariable("AUTHDOG_API_TOKEN"));

var probe = await client.HealthAsync();

Keep the token server-side. GetUserInfoAsync still uses the caller access token, not the management key.

A third constructor argument is a custom HttpClient. Optional credentials environmentSecret (adenv_), scimToken (adscim_), and hrisToken (adhris_) are the AuthZEN/MCP runtime, SCIM, and HRIS Bearers.

HealthAsync is public and works without an API key. Health() is the synchronous wrapper.

Resolve a user from an access token

using Authdog;
using Authdog.Exceptions;

try
{
    var info = await client.GetUserInfoAsync(accessToken);
    Console.WriteLine(info.User.DisplayName);
}
catch (AuthenticationException)
{
    // 401: missing, invalid, or expired access token
    throw;
}
catch (ApiException)
{
    // transport or non-401 HTTP failure
    throw;
}

GetUserInfo is the synchronous wrapper. GET /v1/userinfo always sends Authorization: Bearer <access-token>. A constructor API key does not replace that header.

Call the management API

Properties on the client wrap Waves 1–5 of the public /v1 surface:

AuthZEN discovery is unauthenticated. Evaluate, search, and the MCP runtime use environmentSecret. SCIM uses scimToken. HRIS uses hrisToken. OpenAPI at `/v1/openapi` is the field-level contract.

Errors

Other languages

Next

• API reference: auth, versioning, and resource families
• Backend requests: validate sessions on incoming requests
• Users: directory model the Users namespace talks to