Documentation

AuthnzNet is distributed as a .NET global tool. You need the .NET 10 SDK or later.

$ dotnet tool install -g Noundry.AuthnzNet.CLI

To update an existing installation:

$ dotnet tool update -g Noundry.AuthnzNet.CLI

Once installed, the ndaz command is available globally.

Get a fully configured OAuth server running in three commands:

# Step 1: Scaffold a tenant with admin user and OAuth client
$ ndaz quickstart --name "MyApp"

# Step 2: Start the OAuth server
$ ndaz serve

The quickstart command creates:

• A tenant with the name you specified
• An admin user with generated credentials
• An OAuth client with client ID and secret

The server runs at https://localhost:5000 with a local SQLite database.

The ndaz CLI provides commands for managing every aspect of your OAuth server.

$ ndaz serve
$ ndaz serve --port 5001  # custom port

$ ndaz quickstart --name "MyApp"

$ ndaz tenant create --name "Staging"
$ ndaz tenant list

$ ndaz user create --email "user@example.com" --password "pass123"
$ ndaz user list

$ ndaz client create --name "My Web App" --redirect-uri "https://localhost:3000/callback"
$ ndaz client list

$ ndaz config show
$ ndaz config set --key "Port" --value "5001"

AuthnzNet exposes standard OpenID Connect endpoints. Any OIDC-compliant client can discover and use them automatically.

Supported Grant Types

AuthnzNet is a standard OIDC provider. Point your framework's auth middleware at https://localhost:5000 and it auto-discovers everything.

ASP.NET Core

builder.Services.AddAuthentication(options =>
{
    options.DefaultScheme = "Cookies";
    options.DefaultChallengeScheme = "oidc";
})
.AddCookie("Cookies")
.AddOpenIdConnect("oidc", options =>
{
    options.Authority = "https://localhost:5000";
    options.ClientId = "your-client-id";
    options.ClientSecret = "your-client-secret";
    options.ResponseType = "code";
    options.Scope.Add("openid");
    options.Scope.Add("profile");
});

NextAuth.js

export default NextAuth({
  providers: [{
    id: "authnznet",
    name: "AuthnzNet",
    type: "oidc",
    issuer: "https://localhost:5000",
    clientId: "your-client-id",
    clientSecret: "your-client-secret",
  }]
})

Any OIDC Client

Point your OIDC library at the discovery endpoint and it will auto-configure:

https://localhost:5000/.well-known/openid-configuration