Logto by axies20 · Pull Request #1241 · CommunityToolkit/Aspire

axies20 · 2026-03-27T14:05:02Z

Closes #<ISSUE_NUMBER>

PR Checklist

Other information

- Introduced `CommunityToolkit.Aspire.Hosting.Logto` project for integrating Logto with PostgreSQL and Redis. - Added extension methods for configuring Logto containers, health checks, and resource dependencies. - Created test projects for validating Logto container configuration and health checks. - Added example projects under `examples/logto` showcasing Logto integration with PostgreSQL and Redis. - Updated solution file and package references to include the new Logto project.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.Client` project for integrating Logto client configuration. - Added `LogtoClientBuilder` for seamless setup of Logto client services in `IHostApplicationBuilder`. - Implemented connection string helper for parsing Logto connection strings. - Updated solution and centralized package references to include the new project.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.ClientApi` under `examples/logto` to demonstrate Logto client integration. - Added project configuration files (`Program.cs`, `appsettings.json`, `launchSettings.json`) for application setup. - Renamed `AddLogtoClient` to `AddLogtoSDKClient` in `LogtoClientBuilder`. - Updated solution and centralized package references to include the new example project and dependencies.

- Introduced a new test project `CommunityToolkit.Aspire.Hosting.Logto.Client.Tests` for validating Logto client behavior. - Added integration and unit tests for `LogtoClientBuilder` and `LogtoConnectionStringHelper`. - Implemented OIDC authentication and JWT bearer support in `LogtoClientBuilder`. - Extended `Program.cs` in `ClientApi` example with authentication routes (`/me`, `/signin`, `/signout`). - Updated dependencies and centralized package references for added functionalities. - Modified project and solution files to include updated references.

- Updated method names from `AddLogtoSDKClient` to `AddLogtoOIDC` for better alignment with OIDC usage. - Enhanced `AddLogtoOIDC` and `AddLogtoJwtBearer` methods to support additional configuration options. - Added `Microsoft.Extensions.DependencyInjection.Abstractions` package reference to support service registration. - Updated tests to reflect the method renaming and new configuration capabilities. - Extended `Program.cs` in the ClientApi example to include `UseAuthentication` and `UseAuthorization`. - Improved consistency and readability of XML documentation across updated methods. - Centralized package references for additional dependencies in `Directory.Packages.props`.

- Changed the `ClientApi` project to `ClientOIDC` for better alignment with OIDC standards. - Updated method signatures in `LogtoClientBuilder` to use `appIndeficator` instead of `appId` and support multiple audience identifiers. - Improved XML documentation consistency for updated methods. - Adjusted solution, project references, and configuration files to reflect the renaming and API changes.

- Introduced `CommunityToolkit.Aspire.Hosting.Logto.ClientJWT` project under `examples/logto` to demonstrate Logto JWT authentication. - Configured authentication and authorization middleware with Logto's JWT Bearer scheme in `Program.cs`. - Added example routes (`/secure` and `/tokens`) for testing secured endpoint access and token retrieval. - Updated `AppHost` to include `ClientJWT` project as a dependency. - Improved XML documentation for `AddLogtoJwtBearer` methods, including updated parameter descriptions and exception handling.

github-actions · 2026-03-27T14:05:26Z

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.sh | bash -s -- 1241

Or

Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.ps1) } 1241"

aaronpowell

Some questions and comments but the main thing is that the client project shouldn't have Hosting in the name (or namespace).

...ityToolkit.Aspire.Hosting.Logto.AppHost/CommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj

aaronpowell · 2026-03-30T05:30:44Z

examples/logto/CommunityToolkit.Aspire.Hosting.Logto.ClientJWT/Program.cs

+builder.AddServiceDefaults();
+
+builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+    .AddLogtoJwtBearer("logto", "http://localhost:5072/",


Shouldn't the endpoint come from Aspire?

It does. logto is the Aspire resource name, so the endpoint is resolved from Aspire via .WithReference(logto). The second parameter is the JWT appIdentification/audience, not the Logto endpoint, so I updated the sample to make that clearer.

aaronpowell · 2026-03-30T05:31:38Z

examples/logto/CommunityToolkit.Aspire.Hosting.Logto.ClientOIDC/Program.cs

+    config.AppId = "s6zda5bqn1qlsjzaiklqn";
+    config.AppSecret = "Df77aDt13MG3nSTgo8eKZP2HdeSfbed0";


I assume these are things that could come from Aspire

Not directly from Aspire today. These values are Logto client credentials, so they need to come from a Logto application registration first. Aspire can pass them through configuration/secrets, but it doesn't create the Logto application automatically.

It would be possible to automate that through the Logto Management API, but that would add a separate provisioning workflow, which felt out of scope for this sample.

...unityToolkit.Aspire.Hosting.Logto.Client/CommunityToolkit.Aspire.Hosting.Logto.Client.csproj

aaronpowell · 2026-03-30T05:35:32Z

src/CommunityToolkit.Aspire.Hosting.Logto/CommunityToolkit.Aspire.Hosting.Logto.csproj

+  <PropertyGroup>
+    <Description>.NET Aspire hosting extensions for Logto (includes PostgreSQL and Redis integration).</Description>
+    <AdditionalPackageTags>logto redis postgres hosting extensions</AdditionalPackageTags>
+    <IsPreview>true</IsPreview>


Why are we marking this as preview? Should we be putting Experimental attributes in?

aaronpowell · 2026-03-30T05:36:37Z

src/CommunityToolkit.Aspire.Hosting.Logto/LogtoBuilderExtensions.cs

+        builderWithResource
+            .WithEntrypoint("sh")
+            .WithArgs("-c", "npm run cli db seed -- --swe && npm start");


it could be very opaque to the user that the entrypoint is being overridden, what's the reason we do it?

We override the entrypoint because Logto requires the DB seed step before the app starts in our Aspire scenario, otherwise the container doesn't come up in a usable state. I agree this is not obvious from AddLogtoContainer(), so I can make it explicit either by documenting it clearly or by moving it behind an opt-in method like WithDatabaseSeeding()/WithSeededStartup().

aaronpowell · 2026-03-30T05:39:31Z

Directory.Packages.props

+<<<<<<< Logto
+    <PackageVersion Include="Logto.AspNetCore.Authentication" Version="0.2.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication" Version="2.3.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Http.Abstractions" Version="2.3.0" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.0" />
+=======
    <PackageVersion Include="AspNetCore.HealthChecks.Network" Version="9.0.0" />
+>>>>>>> main


Think this is a merge gone bad

…ommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

…kit.Aspire.Hosting.Logto.Client.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

…t and package configuration files

- Upgraded `Aspire.AppHost.Sdk` from `13.0.0` to `13.2.0` in `examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj`. - Added `Microsoft.AspNetCore.Authentication.JwtBearer` and `Microsoft.AspNetCore.Authentication.OpenIdConnect` package versions to `Directory.Packages.props`.

…o JWT configuration - Replaced hardcoded API audience with a `const` string in `Program.cs` for improved readability and maintainability.

axies20 added 9 commits December 1, 2025 01:12

Remove unused /signout route from ClientApi example

8a0f9de

Merge branch 'main' into Logto

bc8b00c

aaronpowell requested changes Mar 30, 2026

View reviewed changes

axies20 and others added 7 commits March 30, 2026 14:29

Update examples/logto/CommunityToolkit.Aspire.Hosting.Logto.AppHost/C…

d4378b3

…ommunityToolkit.Aspire.Hosting.Logto.AppHost.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

Update src/CommunityToolkit.Aspire.Hosting.Logto.Client/CommunityTool…

4557bf8

…kit.Aspire.Hosting.Logto.Client.csproj Co-authored-by: Aaron Powell <me@aaron-powell.com>

Merge branch 'main' into Logto

0e3f42c

Remove unused package references and resolve merge conflict in projec…

3976aec

…t and package configuration files

Update ClientJWT example to use a constant for API audience in Logt…

cde0cbd

…o JWT configuration - Replaced hardcoded API audience with a `const` string in `Program.cs` for improved readability and maintainability.

Remove <IsPreview> property from Logto project

d271f0a

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Logto#1241

Logto#1241
axies20 wants to merge 16 commits intoCommunityToolkit:mainfrom
axies20:Logto

axies20 commented Mar 27, 2026

Uh oh!

github-actions bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

aaronpowell left a comment

Uh oh!

Uh oh!

aaronpowell Mar 30, 2026

Uh oh!

axies20 Mar 30, 2026

Uh oh!

aaronpowell Mar 30, 2026

Uh oh!

axies20 Mar 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

aaronpowell Mar 30, 2026

Uh oh!

aaronpowell Mar 30, 2026

Uh oh!

axies20 Mar 30, 2026

Uh oh!

aaronpowell Mar 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

		config.AppId = "s6zda5bqn1qlsjzaiklqn";
		config.AppSecret = "Df77aDt13MG3nSTgo8eKZP2HdeSfbed0";

Conversation

axies20 commented Mar 27, 2026

PR Checklist

Other information

Uh oh!

github-actions bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

aaronpowell left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

aaronpowell Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

axies20 Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

aaronpowell Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

axies20 Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

aaronpowell Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

aaronpowell Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

axies20 Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

aaronpowell Mar 30, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Mar 27, 2026 •

edited

Loading

axies20 Mar 30, 2026 •

edited

Loading