API reference
The Sentinel packages
The public API of all 14Nuvora.Nexus.Sentinel.* packages — every public class, interface, and member with its documentation, generated from the source on each release. For the conceptual guides, start with the docs instead.
Entry point1
Core domain1
HTTP & endpoints1
Protocols3
- OidcServerNuvora.Nexus.Sentinel.OidcServerIn-house OAuth2/OIDC authorization server for Sentinel (no OpenIddict, reqs.md §8.1): discovery, JWKS, authorization code + PKCE, client credentials, refresh token grants, userinfo, revocation (RFC 7009), introspection (RFC 7662), RP-initiated + back-channel logout, client registry and consent — with the host-app interaction contract of §8.6.
- SamlNuvora.Nexus.Sentinel.SamlSAML 2.0 for Sentinel, both sides (reqs.md §9): SP-initiated inbound SSO against external IdPs with hardened XML-DSig validation (§9.1), and Sentinel-as-IdP issuing signed assertions to a registered SP registry with attribute mapping, metadata and redirect/POST bindings (§9.2).
- ScimNuvora.Nexus.Sentinel.ScimSCIM 2.0 provisioning server for Sentinel (reqs.md §11): per-organization bearer-token auth, Users AND Groups (fixes the Node version's users-only gap), the standard filter subset, and RFC 7644 PATCH — mounted with MapSentinelScim().
Storage2
- Stores.EfCoreNuvora.Nexus.Sentinel.Stores.EfCoreEF Core persistence adapter for Sentinel: provider-neutral identity/authorization model with ModelBuilder extensions per Relay's .EfCore conventions. Works on PostgreSQL, SQL Server and SQLite (reqs.md §22.1).
- Stores.ValKeyNuvora.Nexus.Sentinel.Stores.ValKeyValKey/Redis hot-state adapter for Nuvora Nexus Sentinel: fleet-wide rate counters and cache-invalidation pub/sub (works with any Redis-compatible server)
Integration1
Migration & configuration2
- DeclarativeConfigNuvora.Nexus.Sentinel.DeclarativeConfigDeclarative realm configuration for Sentinel (reqs.md §13.2): a versioned YAML/JSON model for realms, organizations, roles, OIDC clients, SAML connections, identity providers, workload trusts and webhook endpoints, with an idempotent diff-aware applier over the public store ports.
- ImportersNuvora.Nexus.Sentinel.ImportersMigration importer suite for Sentinel: ASP.NET Core Identity, Keycloak realm-export, Auth0 bulk export and Duende client-config importers, foreign-hash coexistence (bcrypt), and shadow-mode authorization for cutover gating (reqs.md §28). Library-only — callable from CLIs and hosts, no web framework.
Operations2
- AdminNuvora.Nexus.Sentinel.AdminSentinel admin console (reqs.md §25): the React admin UI shipped as embedded static assets and served by MapSentinelAdminUi — consumers never run Node tooling.
- DiagnosticsNuvora.Nexus.Sentinel.DiagnosticsOpenTelemetry instrumentation for Nuvora Nexus Sentinel: ActivitySource/Meter registration helpers and the meter-backed metrics implementation (logins, token mints, authorization checks, webhook deliveries)