Logto by axies20 · Pull Request #1241 · CommunityToolkit/Aspire

axies20 · 2026-03-27T14:05:02Z

Closes #<ISSUE_NUMBER>

PR Checklist

Other information

- Introduced `CommunityToolkit.Aspire.Hosting.Logto` project for integrating Logto with PostgreSQL and Redis. - Added extension methods for configuring Logto containers, health checks, and resource dependencies. - Created test projects for validating Logto container configuration and health checks. - Added example projects under `examples/logto` showcasing Logto integration with PostgreSQL and Redis. - Updated solution file and package references to include the new Logto project.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.Client` project for integrating Logto client configuration. - Added `LogtoClientBuilder` for seamless setup of Logto client services in `IHostApplicationBuilder`. - Implemented connection string helper for parsing Logto connection strings. - Updated solution and centralized package references to include the new project.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.ClientApi` under `examples/logto` to demonstrate Logto client integration. - Added project configuration files (`Program.cs`, `appsettings.json`, `launchSettings.json`) for application setup. - Renamed `AddLogtoClient` to `AddLogtoSDKClient` in `LogtoClientBuilder`. - Updated solution and centralized package references to include the new example project and dependencies.

- Introduced a new test project `CommunityToolkit.Aspire.Hosting.Logto.Client.Tests` for validating Logto client behavior. - Added integration and unit tests for `LogtoClientBuilder` and `LogtoConnectionStringHelper`. - Implemented OIDC authentication and JWT bearer support in `LogtoClientBuilder`. - Extended `Program.cs` in `ClientApi` example with authentication routes (`/me`, `/signin`, `/signout`). - Updated dependencies and centralized package references for added functionalities. - Modified project and solution files to include updated references.

- Updated method names from `AddLogtoSDKClient` to `AddLogtoOIDC` for better alignment with OIDC usage. - Enhanced `AddLogtoOIDC` and `AddLogtoJwtBearer` methods to support additional configuration options. - Added `Microsoft.Extensions.DependencyInjection.Abstractions` package reference to support service registration. - Updated tests to reflect the method renaming and new configuration capabilities. - Extended `Program.cs` in the ClientApi example to include `UseAuthentication` and `UseAuthorization`. - Improved consistency and readability of XML documentation across updated methods. - Centralized package references for additional dependencies in `Directory.Packages.props`.

- Changed the `ClientApi` project to `ClientOIDC` for better alignment with OIDC standards. - Updated method signatures in `LogtoClientBuilder` to use `appIndeficator` instead of `appId` and support multiple audience identifiers. - Improved XML documentation consistency for updated methods. - Adjusted solution, project references, and configuration files to reflect the renaming and API changes.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.ClientJWT` project under `examples/logto` to demonstrate Logto JWT authentication. - Configured authentication and authorization middleware with Logto's JWT Bearer scheme in `Program.cs`. - Added example routes (`/secure` and `/tokens`) for testing secured endpoint access and token retrieval. - Updated `AppHost` to include `ClientJWT` project as a dependency. - Improved XML documentation for `AddLogtoJwtBearer` methods, including updated parameter descriptions and exception handling.

github-actions · 2026-03-27T14:05:26Z

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.sh | bash -s -- 1241

Or

Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.ps1) } 1241"

aaronpowell

Some questions and comments but the main thing is that the client project shouldn't have Hosting in the name (or namespace).

aaronpowell · 2026-03-30T05:30:44Z

+builder.AddServiceDefaults();
+
+builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+    .AddLogtoJwtBearer("logto", "http://localhost:5072/",


Shouldn't the endpoint come from Aspire?

It does. logto is the Aspire resource name, so the endpoint is resolved from Aspire via .WithReference(logto). The second parameter is the JWT appIdentification/audience, not the Logto endpoint, so I updated the sample to make that clearer.

aaronpowell · 2026-03-30T05:31:38Z

+    config.AppId = "s6zda5bqn1qlsjzaiklqn";
+    config.AppSecret = "Df77aDt13MG3nSTgo8eKZP2HdeSfbed0";


I assume these are things that could come from Aspire

Not directly from Aspire today. These values are Logto client credentials, so they need to come from a Logto application registration first. Aspire can pass them through configuration/secrets, but it doesn't create the Logto application automatically.

It would be possible to automate that through the Logto Management API, but that would add a separate provisioning workflow, which felt out of scope for this sample.

aaronpowell · 2026-03-30T05:35:32Z

+  <PropertyGroup>
+    <Description>.NET Aspire hosting extensions for Logto (includes PostgreSQL and Redis integration).</Description>
+    <AdditionalPackageTags>logto redis postgres hosting extensions</AdditionalPackageTags>
+    <IsPreview>true</IsPreview>


Why are we marking this as preview? Should we be putting Experimental attributes in?

aaronpowell · 2026-03-30T05:36:37Z

+        builderWithResource
+            .WithEntrypoint("sh")
+            .WithArgs("-c", "npm run cli db seed -- --swe && npm start");


it could be very opaque to the user that the entrypoint is being overridden, what's the reason we do it?

We override the entrypoint because Logto requires the DB seed step before the app starts in our Aspire scenario, otherwise the container doesn't come up in a usable state. I agree this is not obvious from AddLogtoContainer(), so I can make it explicit either by documenting it clearly or by moving it behind an opt-in method like WithDatabaseSeeding()/WithSeededStartup().

I think we should move it to a method like WithDatabaseSeeding (or WithSeededStartup - naming things is hard and I'm not fussed either way) just so that we make it obvious.

That is, I assume that Logto will run without having to run this seed right?

aaronpowell · 2026-03-30T05:39:31Z

+<<<<<<< Logto
+    <PackageVersion Include="Logto.AspNetCore.Authentication" Version="0.2.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication" Version="2.3.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Http.Abstractions" Version="2.3.0" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.0" />
+=======
    <PackageVersion Include="AspNetCore.HealthChecks.Network" Version="9.0.0" />
+>>>>>>> main


Think this is a merge gone bad

…ommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

…kit.Aspire.Hosting.Logto.Client.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

…t and package configuration files

- Upgraded `Aspire.AppHost.Sdk` from `13.0.0` to `13.2.0` in `examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj`. - Added `Microsoft.AspNetCore.Authentication.JwtBearer` and `Microsoft.AspNetCore.Authentication.OpenIdConnect` package versions to `Directory.Packages.props`.

…o JWT configuration - Replaced hardcoded API audience with a `const` string in `Program.cs` for improved readability and maintainability.

…ferences - Renamed `CommunityToolkit.Aspire.Hosting.Logto.Client` to `CommunityToolkit.Aspire.Logto.Client` for improved namespace consistency. - Updated all project, namespace, and solution references to reflect the renaming. - Adjusted example projects (`ClientJWT` and `ClientOIDC`) and `AppHost` references accordingly.

…cing in Logto container

aaronpowell

Need to update the test list to include the new test projects

…GitHub Actions

axies20 · 2026-04-13T09:18:50Z

Something wrong? Can it be reopened?

…and add support for data volume mapping.

…pHost` project reference to test project

…dom host port assignment.

…ed APIs and tests. Streamline naming for consistency.

…toBuilderExtensions`.

axies20 · 2026-04-26T21:31:07Z

Can you please reopen and check?

aaronpowell · 2026-05-21T06:34:12Z

+        builderWithResource
+            .WithEntrypoint("sh")
+            .WithArgs("-c", "npm run cli db seed -- --swe && npm start");


I think we should move it to a method like WithDatabaseSeeding (or WithSeededStartup - naming things is hard and I'm not fussed either way) just so that we make it obvious.

That is, I assume that Logto will run without having to run this seed right?

aaronpowell · 2026-05-21T06:35:09Z

+    public const string Image = "svhd/logto";
+
+    /// <summary>1.38</summary>
+    public const string Tag = "1.38";


Suggested change

public const string Tag = "1.38";

public const string Tag = "1.39";

That looks like latest since the PR has been delayed.

aaronpowell · 2026-05-21T06:37:43Z

Need to bump the SDK version on the example to match the rest of repo - that'd be why the tests are failing

Copilot

Pull request overview

This PR introduces a new Logto integration to the Aspire Community Toolkit, including a hosting resource for running Logto in an AppHost and a client library for configuring OIDC/JWT authentication from configuration/connection strings, along with examples and test coverage.

Changes:

Added CommunityToolkit.Aspire.Hosting.Logto container resource + builder extensions (PostgreSQL/Redis wiring, health checks, env-var helpers).
Added CommunityToolkit.Aspire.Logto.Client extensions for OIDC and JWT bearer setup, including connection-string endpoint parsing.
Added examples, tests, solution/workflow wiring, and central package versions needed for the new projects.

Show a summary per file

File	Description
tests/CommunityToolkit.Aspire.Logto.Client.Tests/LogtoConnectionStringHelperTests.cs	Unit tests for extracting Logto endpoint from connection strings.
tests/CommunityToolkit.Aspire.Logto.Client.Tests/LogtoClientBuilderTests.cs	Unit tests for client builder validation/config resolution.
tests/CommunityToolkit.Aspire.Logto.Client.Tests/LogtoClientBuilderIntegrationTests.cs	Integration tests asserting authentication scheme/options registration.
tests/CommunityToolkit.Aspire.Logto.Client.Tests/CommunityToolkit.Aspire.Logto.Client.Tests.csproj	Test project for Logto client integration.
tests/CommunityToolkit.Aspire.Hosting.Logto.Tests/ResourceCreationTests.cs	Unit tests asserting Logto hosting resource creation + health check annotation.
tests/CommunityToolkit.Aspire.Hosting.Logto.Tests/CommunityToolkit.Aspire.Hosting.Logto.Tests.csproj	Test project for Logto hosting integration.
tests/CommunityToolkit.Aspire.Hosting.Logto.Tests/AppHostTest.cs	Docker-based integration test verifying Logto container starts and responds.
src/CommunityToolkit.Aspire.Logto.Client/LogtoConnectionStringHelper.cs	Helper to parse/validate endpoint from connection strings.
src/CommunityToolkit.Aspire.Logto.Client/LogtoClientBuilder.cs	Client extensions to add Logto OIDC + JWT bearer authentication.
src/CommunityToolkit.Aspire.Logto.Client/CommunityToolkit.Aspire.Logto.Client.csproj	Logto client library project definition + package refs.
src/CommunityToolkit.Aspire.Hosting.Logto/README.md	Hosting integration documentation for Logto.
src/CommunityToolkit.Aspire.Hosting.Logto/LogtoTags.cs	Container image registry/name/tag constants for Logto.
src/CommunityToolkit.Aspire.Hosting.Logto/LogtoResource.cs	Logto container resource model + connection string expression.
src/CommunityToolkit.Aspire.Hosting.Logto/LogtoBuilderExtensions.cs	Hosting builder extensions for adding/configuring Logto + Postgres/Redis + health checks.
src/CommunityToolkit.Aspire.Hosting.Logto/CommunityToolkit.Aspire.Hosting.Logto.csproj	Hosting integration project definition + NuGet metadata.
examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/Properties/launchSettings.json	Launch profiles for OIDC sample.
examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/Program.cs	Minimal OIDC client sample using `AddLogtoOIDC`.
examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/CommunityToolkit.Aspire.Logto.ClientOIDC.csproj	OIDC sample project definition.
examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/CommunityToolkit.Aspire.Hosting.Logto.Client.http	HTTP scratch file for OIDC sample.
examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/appsettings.json	App settings for OIDC sample.
examples/logto/CommunityToolkit.Aspire.Logto.ClientJWT/Properties/launchSettings.json	Launch profiles for JWT sample.
examples/logto/CommunityToolkit.Aspire.Logto.ClientJWT/Program.cs	Minimal JWT bearer sample using `AddLogtoJwtBearer`.
examples/logto/CommunityToolkit.Aspire.Logto.ClientJWT/CommunityToolkit.Aspire.Logto.ClientJWT.csproj	JWT sample project definition.
examples/logto/CommunityToolkit.Aspire.Logto.ClientJWT/CommunityToolkit.Aspire.Hosting.Logto.ClientJWT.http	HTTP scratch file for JWT sample.
examples/logto/CommunityToolkit.Aspire.Logto.ClientJWT/appsettings.json	App settings for JWT sample.
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.ServiceDefaults/Extensions.cs	ServiceDefaults helpers for the Logto examples (OTel/health/etc.).
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.ServiceDefaults/CommunityToolkit.Aspire.Hosting.Logto.ServiceDefaults.csproj	ServiceDefaults project definition for Logto examples.
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/Properties/launchSettings.json	Launch profiles for Logto AppHost example.
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/CommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj	AppHost example project definition.
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/appsettings.json	AppHost example logging configuration.
examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/AppHost.cs	AppHost wiring for Postgres + Redis + Logto + client sample projects.
Directory.Packages.props	Central package versions for Logto/auth-related packages.
CommunityToolkit.Aspire.slnx	Adds new Logto src/tests/examples projects to the solution.
.github/workflows/tests.yaml	Adds new Logto test projects to CI test matrix.

Copilot's findings

Comments suppressed due to low confidence (1)

examples/logto/CommunityToolkit.Aspire.Logto.ClientOIDC/Program.cs:17

The sample sets RequireHttpsMetadata = false, which disables HTTPS metadata requirement for OIDC and is unsafe outside local development. If this is intended only for local testing, gate it on builder.Environment.IsDevelopment() (or clearly document it) to reduce the chance of copying insecure defaults into production.

},oidcOptions: opt =>
{
    opt.RequireHttpsMetadata = false;
});

Files reviewed: 34/34 changed files
Comments generated: 25

+public sealed class LogtoResource(string name)
+    : ContainerResource(name), IResourceWithConnectionString
+{
+    internal const string PrimaryEndpointName = "http";


+        var builder = new ReferenceExpressionBuilder();
+
+        builder.Append(
+            $"Endpoint={PrimaryEndpointName}://{PrimaryEndpoint.Property(EndpointProperty.Host)}:{PrimaryEndpoint.Property(EndpointProperty.Port)}");


@@ -0,0 +1,66 @@
+using Aspire.Hosting.ApplicationModel;
+
+namespace CommunityToolkit.Aspire.Hosting.Logto;


+using Aspire.Hosting.ApplicationModel;
+using Microsoft.Extensions.DependencyInjection;
+
+namespace CommunityToolkit.Aspire.Hosting.Logto;


+    public static void WithDeprecationTracing(this IResourceBuilder<LogtoResource> builderWithResource)
+    {
+        builderWithResource.WithEnvironment("NODE_OPTIONS", "--trace-deprecation");


@@ -0,0 +1,21 @@
+<Project Sdk="Aspire.AppHost.Sdk/13.2.0">


+    [Fact]
+    public void AddLogtoSDKClient_UsesConnectionStringEndpoint_WhenSectionEndpointMissing()
+    {
+        // Arrange: удаляем Endpoint из секции, оставляем только в connection string
+        var extraConfig = new Dictionary<string, string?>
+        {
+            ["Aspire:Logto:Client:Endpoint"] = null,
+            ["ConnectionStrings:Logto"] = "Endpoint=https://logto-from-cs.example.com"
+        };
+
+        var builder = CreateBuilderWithBaseConfig(extraConfig);
+
+        // Act
+        builder.AddLogtoOIDC(connectionName: "Logto");
+        using var host = builder.Build();
+
+        // Assert: как минимум убедимся, что всё собралось
+        // и LogtoOptions вообще зарегистрированы (если библиотека их регистрирует)
+        var optionsMonitor = host.Services.GetService<IOptionsMonitor<LogtoOptions>>();


+using Logto.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.Options;
+


+public class LogtoClientBuilderTests
+{
+    [Fact]
+    public void AddLogtoSDKClient_ThrowsArgumentNull_WhenBuilderIsNull()
+    {


+/// <summary>
+/// Represents a collection of constants for container tags related to the Logto application.
+/// </summary>
+public class LogtoTags
+{
+    /// <summary>docker.io</summary>
+    public const string Registry = "docker.io";
+
+    /// <summary>svhd/logto</summary>
+    public const string Image = "svhd/logto";
+
+    /// <summary>1.38</summary>
+    public const string Tag = "1.38";
+}


axies20 added 9 commits December 1, 2025 01:12

Remove unused /signout route from ClientApi example

8a0f9de

Merge branch 'main' into Logto

bc8b00c

aaronpowell requested changes Mar 30, 2026

View reviewed changes

axies20 and others added 9 commits March 30, 2026 14:29

Update examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/C…

d4378b3

…ommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

Update src/CommunityToolkit.Aspire.Hosting.Logto.Client/CommunityTool…

4557bf8

…kit.Aspire.Hosting.Logto.Client.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

Merge branch 'main' into Logto

0e3f42c

Remove unused package references and resolve merge conflict in projec…

3976aec

…t and package configuration files

Update ClientJWT example to use a constant for API audience in Logt…

cde0cbd

…o JWT configuration - Replaced hardcoded API audience with a `const` string in `Program.cs` for improved readability and maintainability.

Remove <IsPreview> property from Logto project

d271f0a

Add WithDeprecationTracing method to enable Node.js deprecation tra…

a2e300c

…cing in Logto container

axies20 requested a review from aaronpowell April 1, 2026 13:36

aaronpowell approved these changes Apr 2, 2026

View reviewed changes

aaronpowell requested changes Apr 2, 2026

View reviewed changes

axies20 added 2 commits April 2, 2026 10:27

Merge branch 'main' into Logto

97ce6d6

Add Hosting.Logto.Tests and Logto.Client.Tests to test matrix in …

63356b8

…GitHub Actions

github-actions Bot added the Stale label Apr 8, 2026

github-actions Bot closed this Apr 10, 2026

ErikEJ reopened this Apr 13, 2026

github-actions Bot removed the Stale label Apr 14, 2026

Refactor Logto configuration: introduce validation for Logto options …

20f300b

…and add support for data volume mapping.

axies20 requested a review from aaronpowell April 15, 2026 10:15

axies20 added 5 commits April 15, 2026 13:22

Refactor AppHostTest to use AspireIntegrationTestFixture; add `Ap…

cbd16a8

…pHost` project reference to test project

Allow null port and adminPort in WithResourcePort to enable ran…

907c4d5

…dom host port assignment.

Update Logto container tag to v1.38

bac366e

Refactor LogtoContainerResource to LogtoResource and update relat…

95c6f2c

…ed APIs and tests. Streamline naming for consistency.

Set default HTTP and admin ports in WithResourcePort method of `Log…

231ae98

…toBuilderExtensions`.

github-actions Bot added the Stale label Apr 23, 2026

github-actions Bot closed this Apr 26, 2026

aaronpowell reopened this May 12, 2026

aaronpowell removed the Stale label May 12, 2026

axies20 and others added 3 commits May 12, 2026 17:01

Merge branch 'main' into Logto

6bfd3ca

Merge branch 'main' into Logto

9aa53f9

Merge branch 'main' into Logto

dcbb327

aaronpowell requested a review from Copilot May 21, 2026 06:31

Copilot started reviewing on behalf of aaronpowell May 21, 2026 06:31 View session

aaronpowell reviewed May 21, 2026

View reviewed changes

Copilot AI reviewed May 21, 2026

View reviewed changes

		config.AppId = "s6zda5bqn1qlsjzaiklqn";
		config.AppSecret = "Df77aDt13MG3nSTgo8eKZP2HdeSfbed0";

	public const string Tag = "1.38";
	public const string Tag = "1.39";

		@@ -0,0 +1,66 @@
		using Aspire.Hosting.ApplicationModel;

		namespace CommunityToolkit.Aspire.Hosting.Logto;

Conversation

axies20 commented Mar 27, 2026

PR Checklist

Other information

Uh oh!

github-actions Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

aaronpowell left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

axies20 Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

aaronpowell left a comment

Choose a reason for hiding this comment

Uh oh!

axies20 commented Apr 13, 2026

Uh oh!

axies20 commented Apr 26, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

aaronpowell commented May 21, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions Bot commented Mar 27, 2026 •

edited

Loading

axies20 Mar 30, 2026 •

edited

Loading