PrimusSaaS.Identity.Broker.Redis 1.0.0

PrimusSaaS.Identity.Broker.Redis

Redis-backed rate limiter for PrimusSaaS.Identity.Broker. Required for multi-instance (HA) deployments — without this, each app pod maintains its own in-memory counter and an attacker can bypass rate limits by hitting different pods.

Uses StackExchange.Redis with a fixed-window Lua script for atomic, TTL-safe increments.

Quick Start

// 1. Register the Redis connection
builder.Services.AddSingleton<IConnectionMultiplexer>(
 ConnectionMultiplexer.Connect(builder.Configuration["Redis:ConnectionString"]!));

// 2. Replace the default in-memory rate limiter with the Redis one
builder.Services.AddSingleton<IPrimusAuthRateLimiter, RedisRateLimiter>();

Store the Redis connection string in user secrets or environment variables:

dotnet user-secrets set "Redis:ConnectionString" "localhost:6379"

Configuration

RedisRateLimiter accepts optional constructor parameters (default values shown):

To customise, register manually:

builder.Services.AddSingleton<IPrimusAuthRateLimiter>(sp =>
 new RedisRateLimiter(
 sp.GetRequiredService<IConnectionMultiplexer>(),
 maxRequests: 5,
 windowSeconds: 30));

What it includes

• RedisRateLimiter — implements IPrimusAuthRateLimiter using a Redis fixed-window counter
• Fixed-window key format: primus:ratelimit:{action}:{ip}
• Atomic Lua script: increment + set TTL on first write only (TTL not reset on every hit)

Target frameworks

• .NET 8
• .NET 9