Fluent Security configuration
for ASP.NET MVC

FluentSecurity provides a fluent interface for configuring security in ASP.NET MVC.
No attributes or nasty xml, just pure love.
Go get it on NuGet!

PM> Install-Package FluentSecurity

Version 2.1.0
ASP.NET MVC 3 and ASP.NET MVC 4

Fluent-Security 2.0 is out!

Now with support for Caching, Profiles, Async controllers, void actions, ActionNameAttribute and much more...

Learn more

Getting started with FluentSecurity is easy. You'll be up and running in minutes.

Learn more

NuGet

The easiest way to get started is to install FluentSecurity via NuGet. Search for FluentSecurity in the "Add library reference" dialog or install it through the package manager console in Visual Studio.
PM> Install-Package FluentSecurity

NuGet

Download

If you're not using NuGet you can grab the latest stable binaries from Github.

Download

Why FluentSecurity

  • Code based configuration

    No attributes or nasty xml cluttering up your code.

  • Low imprint

    FluentSecurity won't spread like wildfire in your application. Your configuration can be kept in a single file.

  • ASP.NET MVC 4 ready

    Built against the latest version of ASP.NET MVC. Use the built in ASP.NET membership provider or roll your own security.

  • Customizable

    Don't like what's in the box? Create your own implementations and hook it in using your IoC-container.

  • Open

    Have a need for something not supported by FluentSecurity? Fork us on github, do your magic and send us the patch!

  • Tested

    FluentSecurity is used successfully in production and has a code coverage of 99%.

Blog posts

Issues & feature requests

2014-04-01 10:36:40

chrisism

81 - Make internal ServiceLocator overridable with external

I like to use an own implementation of ISecurityHandler, but it looks like FluentSecurity is resolving this only with the internal ServiceLocator....

2014-03-14 14:14:15

hernangm

80 - Ignore NonAction Methods

As per http://msdn.microsoft.com/en-us/library/system.web.mvc.nonactionattribute(v=vs.118).aspx, it would be reasonable to exclude nonaction method...

2014-03-14 10:31:45

kiyarash

79 - Support MVC 5

Hi,very thanks for FluentSecurity. Current version of FluentSecurity suppurt MVC 5?

2014-03-14 06:31:33

hernangm

78 - Global filters for controllers

It would be handy to have a way to exclude controllers globally so no policies would be applied to them when using methods such as ForAllController...

2014-03-01 14:49:39

marcelopetersen

77 - Custom policy removes validation of security configuration

Hi, I've created a custom policy, and when I configure it on fluent security, validations of missing configuration stop to work (I didn't setup...

Github commits (develop)

2014-04-21 22:12:07

Chandra Vedantham

2a05263beb080cca05447c2b3632ea882446b91f

Merge pull request #82 from Chandu/feature-non-action-methods Ignore NonAction actions on controller.

2014-04-19 15:48:27

Chandu

2f6e453c2eed81b04f17aabe03dfff72d013d196

Added code to ignore action methods with [NonAction] attribute while picking action methods for policy construction

2014-03-14 20:32:41

Kristoffer Ahl

6767ce456b045fd105ae46b921c9fc18f026c5fb

- Added a Contributing.md file.

2013-12-17 19:23:29

Kristoffer Ahl

ed7b7e5480a172da1bf53f7d2ec42ceb83e1a909

Merge branch 'release/2.1.0' into develop

2013-12-17 19:01:04

Kristoffer Ahl

844f32ac3867ed7c828a8acf65d28735c1cecfb4

- Bumped version to 2.1.0.