API Gateway Template — Authentication (agents)

Agent intent

Identity vs Auth Server vs Gateway: do not merge concerns when generating prompts.

Template role: Edge / BFF host — YARP-style routing, JWT at perimeter, rate limits — not business domain.

Canonical technical documentation

Full prose, diagrams, and edge cases live in ConnectSoft.Documentation:

➜ Authentication — public doc

Repository

• Repo: ConnectSoft.ApiGatewayTemplate — README.md, AGENTS.md
• Installer (typical): ConnectSoft.ApiGatewayTemplate.Installer
• Short name (typical): connectsoft-apigateway — confirm with dotnet new connectsoft-apigateway -h when applicable.

Agent checklist

• Prefer public doc for long explanations; keep Factory responses actionable and short.
• Do not embed secrets in generated appsettings; use env / KeyVault patterns per platform.

• Cross-link Template Architecture when touching DI or layering.

• Gateway: validate JWT; Auth Server: issue tokens; Identity: users.

Related (this repo)

• Overview
• Topic hub