Maui Authentication

Supported Authentication Patterns

• OAuth2 Authorization Code Flow (recommended)
• OpenID Connect (OIDC)
• JWT-based APIs
• Custom backend authentication
• Social logins (Google, Microsoft, Apple)

Recommended Architecture

Services
└─ Auth
   ├─ Interfaces
   └─ Models

Agent Usage Guidelines

• When generating authentication code, always:
  • Use WebAuthenticator.Default.AuthenticateAsync for login.
  • Store tokens in SecureStorage.
  • Implement IAuthService and AuthService.
  • Provide IsLoggedIn, LoginAsync, LogoutAsync, and RefreshTokenAsync.
• When asked to “add login,” generate:
  • A LoginPage + LoginViewModel
  • AuthService + interface
  • Token models
  • SecureStorage helpers
• When asked to “secure an API call,” apply:
  • Bearer token injection
  • Expiration checks
  • Automatic refresh

Out of Scope

• UI styling (covered in maui-ui-best-practices)
• Backend implementation details
• Deployment configuration