LiveAuth - a nuget pkg to liberate your JWT authentication
I’m excited to announce the release of "LiveAuth" — an extension for ASP.NET Core that solves one of the most common limitations of JWT authentication: lack of real-time control over active session...

Source: DEV Community
I’m excited to announce the release of "LiveAuth" — an extension for ASP.NET Core that solves one of the most common limitations of JWT authentication: lack of real-time control over active sessions. JWT is widely used because it is stateless and scalable. However, this design also introduces several practical challenges in real systems. Once a JWT is issued, it cannot easily: • be revoked immediately • reflect role changes in real time • support forced logout • enforce true session control In many production environments, this leads to difficult trade-offs between security and simplicity. "LiveAuth" addresses this problem by introducing dynamic session validation on top of existing JWT authentication, without replacing the authentication pipeline. Instead of modifying the authentication scheme, LiveAuth integrates with the OnTokenValidated hook of JwtBearer authentication. Every request is validated against a central session store, allowing the application to enforce real-time session