Alphabet: Production-Ready .NET 10 Web API Template

Alphabet is a .NET 10 Web API solution template with JWT auth, PBAC, background scheduling, and multi-channel messaging built on Clean Architecture.

Alphabet is a production-oriented .NET 10 Web API solution template that gives you a fully wired backend out of the box. It includes JWT authentication with MFA, privilege-based access control, a Hangfire-powered scheduler, multi-channel communications (Email, SMS, Push, InApp, Webhook), and a Clean Architecture module structure you can extend immediately.

Quick Start

Run the API and make your first authenticated request in minutes.

Configuration

Configure database providers, cache backends, JWT secrets, and more.

Authentication

Learn how to register, log in, manage tokens, and enable MFA.

Access Control

Manage privileges, assign them to roles and users, and evaluate access.

Scheduler

Create and manage background jobs: HTTP calls, stored procedures, code, and files.

Communications

Send messages through Email, SMS, Push, InApp, and Webhook channels.

How it works

1. Run the API

   Start the API with dotnet run or docker compose up -d and browse to /swagger to explore the interactive API docs.

2. Register and authenticate

   Call POST /api/v1/auth/register to create an account, confirm your email, then call POST /api/v1/auth/login to receive a JWT access token and refresh token.

3. Include the token in requests

   Pass the access token in the Authorization: Bearer <token> header on every authenticated request.

4. Explore the modules

   Use the scheduler to automate jobs, the privilege module to control access, and the communication module to send multi-channel notifications.

Key features

JWT Authentication

Short-lived access tokens (15 min) with 7-day rotating refresh tokens and optional cookie transport.

Multi-Factor Authentication

TOTP authenticator app enrollment or OTP delivery over email/SMS.

Privilege-Based Access Control

Fine-grained resource.action privileges assigned to roles or individual users, with composite policies and audit logging.

Background Scheduler

Hangfire-powered job engine supporting HTTP, stored procedure, code, and file operation job types with cron/interval/one-time scheduling.

Multi-Channel Messaging

Dispatch notifications through Email, SMS, Push, InApp, and Webhook in a single API call.

Problem Details Errors

All errors return RFC 7807 Problem Details payloads so clients get consistent, machine-readable error responses.