SeliseBlocks.Genesis.OS 4.5.9

.NET 10.0

dotnet add package SeliseBlocks.Genesis.OS --version 4.5.9

NuGet\Install-Package SeliseBlocks.Genesis.OS -Version 4.5.9

This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.

<PackageReference Include="SeliseBlocks.Genesis.OS" Version="4.5.9" />

For projects that support PackageReference, copy this XML node into the project file to reference the package.

<PackageVersion Include="SeliseBlocks.Genesis.OS" Version="4.5.9" />
                    

                            Directory.Packages.props

<PackageReference Include="SeliseBlocks.Genesis.OS" />
                    

                            Project file

For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.

paket add SeliseBlocks.Genesis.OS --version 4.5.9

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

#r "nuget: SeliseBlocks.Genesis.OS, 4.5.9"

#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.

#:package SeliseBlocks.Genesis.OS@4.5.9

#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.

#addin nuget:?package=SeliseBlocks.Genesis.OS&version=4.5.9
                    

                            Install as a Cake Addin

#tool nuget:?package=SeliseBlocks.Genesis.OS&version=4.5.9
                    

                            Install as a Cake Tool

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

SeliseBlocks.Genesis

The .NET service foundation for SELISE <blocks /> microservices. One package wires up configuration and secrets, JWT authentication, multi-tenant request handling, MongoDB, Redis, Azure Service Bus and RabbitMQ messaging, gRPC, and observability (logs, metrics, traces).

Requires .NET 10 (net10.0). Full repository documentation: https://github.com/SELISEdigitalplatforms/blocks-genesis-net.

Installation

dotnet add package SeliseBlocks.Genesis

Quick start: API service

using Blocks.Genesis;

const string serviceName = "MyBlocksApi";

// Configure secrets and logging first. Pass VaultType.Azure or VaultType.OnPrem,
// or let ResolveVaultType() read the BLOCKS_VAULT_TYPE environment variable.
await ApplicationConfigurations.ConfigureLogAndSecretsAsync(
    serviceName, ApplicationConfigurations.ResolveVaultType());

var builder = WebApplication.CreateBuilder(args);
ApplicationConfigurations.ConfigureApiEnv(builder, args);
ApplicationConfigurations.ConfigureKestrel(builder);

var services = builder.Services;
ApplicationConfigurations.ConfigureServices(services, new MessageConfiguration
{
    ServiceName = serviceName,
    AzureServiceBusConfiguration = new AzureServiceBusConfiguration
    {
        Queues = ["demo_queue"],
        Topics = ["demo_topic"],
    },
});
ApplicationConfigurations.ConfigureApi(services, serviceName);

var app = builder.Build();
ApplicationConfigurations.ConfigureMiddleware(app);

await app.RunAsync();

Quick start: worker service

using Blocks.Genesis;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Hosting;

const string serviceName = "MyBlocksWorker";

await ApplicationConfigurations.ConfigureLogAndSecretsAsync(
    serviceName, ApplicationConfigurations.ResolveVaultType());

var messageConfiguration = new MessageConfiguration
{
    ServiceName = serviceName,
    AzureServiceBusConfiguration = new AzureServiceBusConfiguration
    {
        Queues = ["demo_queue"],
        Topics = ["demo_topic"],
    },
};

var host = Host.CreateDefaultBuilder(args)
    .ConfigureServices(services =>
    {
        services.AddSingleton<IConsumer<DemoMessage>, DemoMessageConsumer>();
        ApplicationConfigurations.ConfigureWorker(services, messageConfiguration);
    })
    .Build();

await host.RunAsync();

public sealed record DemoMessage(string Text);

public sealed class DemoMessageConsumer : IConsumer<DemoMessage>
{
    public Task Consume(DemoMessage context)
    {
        Console.WriteLine($"Received: {context.Text}");
        return Task.CompletedTask;
    }
}

Notifications

services.AddBlocksNotifications();   // after the genesis services (API or worker)

publisher.Publish(new NotificationRequest
{
    Name = "iam-user-updated",           // KV notification-config:<Name> in the tenant DB, else the root built-in
    NamedUserIds = [affectedUserId],
    OrganizationId = recordOrgId,        // used only when there is no user token
    Payload = new { Fields = changed },  // JSON, max 256 KB
});

Publish returns at once and never throws. A background worker reads a 1000-item buffer (full: dropped and logged).
The tenant configuration decides receivers (level, scope, filters), channels (inbox, live, push) and the rate limit.
Live goes to NotificationHub groups over the Redis backplane; the hub itself is mapped by blocks-logic only.
Push sends PushRequested to queue blocks_notification_push_listener (consumed by the logic worker).

Configuration

ConfigureLogAndSecretsAsync loads a .env file when one exists at or above the working directory, then resolves secrets from Azure Key Vault (VaultType.Azure) or environment variables (VaultType.OnPrem, prefixed with BlocksSecret__). DatabaseConnectionString and CacheConnectionString are required; startup fails with a descriptive error when they are missing.

Log and trace forwarding (LMT)

By default, logs are written to the console and to MongoDB (BlocksSecret__LogConnectionString), and traces to MongoDB (BlocksSecret__TraceConnectionString). To forward logs and traces to the central LMT pipeline over a message bus instead, set:

# Environment variable (or .env entry)
ServiceBusConnectionString=<your-service-bus-connection-string>

# Optional retry tuning
MaxRetries=3
MaxFailedBatches=100

MaxRetries and MaxFailedBatches can also be set in appsettings.json:

{
  "Lmt": {
    "MaxRetries": 3,
    "MaxFailedBatches": 100
  }
}

Setting	Required	Source	Default
`ServiceBusConnectionString`	Optional	Environment variable	unset (logs and traces go to console and MongoDB)
`MaxRetries`	Optional	`appsettings.json` or environment	`3`
`MaxFailedBatches`	Optional	`appsettings.json` or environment	`100`

Important: keep real connection strings out of source control. Add .env to your .gitignore:

.env
.env.local
.env.*.local

Middleware pipeline (API)

HSTS -> CORS -> Health endpoints (/ping, /health/live, /health/ready) -> Swagger (when configured) -> Routing -> TenantValidation -> GlobalExceptionHandler -> Authentication -> Authorization -> UserRateLimit -> Antiforgery -> Controllers

Rate limiting

Authorized and protected endpoints are rate limited per service and per authenticated subject (user_id, or client_id for client_credentials tokens), with counts shared through Redis under ratelimit:{ServiceName}:{TenantId}:{user|client}:{id}. Public endpoints are never limited. Services can now return 429 Too Many Requests (gRPC: RESOURCE_EXHAUSTED).

Limit (requests per second), resolved once at startup: UserRateLimitPerSecond env var, then the UserRateLimitPerSecond vault secret (BlocksSecret__UserRateLimitPerSecond on-prem), then 100.
Going over the limit blocks the subject for 30 s: 429, Retry-After: 30, Problem Details body "title":"Rate Limit Exceeded". Clients should wait for Retry-After before retrying.
Allowed responses carry RateLimit-Policy: "user";q=<limit>;w=1 and RateLimit: "user";r=<remaining>;t=<reset>.
If Redis is slow (over 50 ms) or down, requests are allowed.
HttpService no longer opens its circuit breaker on a downstream 429; it retries a 429 only when Retry-After fits in the request timeout.

See the repository README for the full contract.

Local development

Start local infrastructure (MongoDB, Redis, RabbitMQ) from the repository root:

docker-compose up -d

Use .env.example as the baseline for environment variables.

Migration notes

ConsumerMessage.ScheduledEnqueueTimeUtc is the corrected property name; SccheduledEnqueueTimeUtc remains as an obsolete alias.
ConfigureAzureServiceBus replaces ConfigerAzureServiceBus; the old name remains as an obsolete shim and will be removed in the next major version.
SecretEndPointAttribute replaces the misspelled SecretEnpPointAttribute, which has been removed.
WorkflowEntity.Settings changes from Dictionary<string, string> to WorkflowSettings?, which holds the per-workflow failure Alert. This is a deliberate breaking change with no [Obsolete] alias; blocks-logic adopts it in blocks-logic#380. No data migration is needed: a stored Settings that is missing, null, {} or holds unknown keys still loads, and a default workflow now writes Settings: { Alert: null } instead of Settings: {}.
The one incompatible stored shape is a Settings.Alert that is neither a document nor null, e.g. { "Alert": "text" }; reading it throws FormatException.
Rules for adding workflow settings: every new property is nullable and null means "use the default"; only add properties, never rename or retype one; every class has [BsonIgnoreExtraElements]; enums are stored as numbers.

License

MIT. See the repository LICENSE file.

Product	Compatible and additional computed target framework versions.
.NET	net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed.

Compatible target framework(s)

Included target framework(s) (in package)

Learn more about Target Frameworks and .NET Standard.

net10.0
- AspNetCore.HealthChecks.MongoDb (>= 9.0.0)
- AspNetCore.HealthChecks.Redis (>= 9.0.0)
- Azure.Identity (>= 1.21.0)
- Azure.Messaging.ServiceBus (>= 7.20.2)
- Azure.Security.KeyVault.Certificates (>= 4.9.0)
- Azure.Security.KeyVault.Secrets (>= 4.11.0)
- DotNetEnv (>= 3.2.0)
- Google.Protobuf (>= 3.35.1)
- Grpc.AspNetCore (>= 2.80.0)
- Grpc.Net.Client (>= 2.80.0)
- Grpc.Tools (>= 2.82.0)
- MessagePack (>= 2.5.303)
- Microsoft.AspNetCore.Authentication.JwtBearer (>= 10.0.7)
- Microsoft.AspNetCore.SignalR.StackExchangeRedis (>= 10.0.7)
- Microsoft.OpenApi (>= 2.7.5)
- MongoDB.Driver (>= 3.8.0)
- OpenTelemetry (>= 1.15.3)
- OpenTelemetry.Extensions.Hosting (>= 1.15.3)
- OpenTelemetry.Instrumentation.AspNetCore (>= 1.15.2)
- OpenTelemetry.Instrumentation.Http (>= 1.15.1)
- OpenTelemetry.Instrumentation.Process (>= 1.12.0-beta.1)
- OpenTelemetry.Instrumentation.Runtime (>= 1.15.1)
- Polly (>= 8.6.6)
- RabbitMQ.Client (>= 7.2.1)
- Rollbar (>= 5.2.2)
- SeliseBlocks.LMT.Client (>= 10.0.1)
- Serilog (>= 4.3.1)
- Serilog.AspNetCore (>= 10.0.0)
- Serilog.Enrichers.Environment (>= 3.0.1)
- Serilog.Enrichers.HttpContext (>= 8.3.0)
- Serilog.Enrichers.OpenTelemetry (>= 1.0.1)
- Serilog.Sinks.Console (>= 6.1.1)
- Serilog.Sinks.MongoDB (>= 7.2.0)
- SharpCompress (>= 0.48.0)
- Snappier (>= 1.3.1)
- StackExchange.Redis (>= 2.12.14)
- Swashbuckle.AspNetCore (>= 10.1.7)

NuGet packages (4)

Showing the top 4 NuGet packages that depend on SeliseBlocks.Genesis.OS:

Package	Downloads
SeliseBlocks.Secrets.OS Secret management for Blocks: metadata and audit in MongoDB on the tenant's own connection, values in Azure Key Vault.	7.5K
SeliseBlocks.ReleaseDriver.OS Blocks Release Driver	5.7K
SeliseBlocks.MonitorDriver.OS Blocks Monitor Driver - Monitor and Health APIs	2.2K
SeliseBlocks.Localization.OS Blocks Eurolm Driver	2.0K

GitHub repositories

This package is not used by any popular GitHub repositories.

Version	Downloads	Last Updated
4.5.9	0	11/1/2026
4.5.8	69	10/29/2026
4.5.7	107	10/29/2026
4.5.6	60	10/29/2026
4.5.5	110	10/29/2026
4.5.4	435	10/29/2026
4.5.3	60	10/28/2026
4.5.2	172	10/28/2026
4.5.1	187	10/28/2026
4.5.0	59	10/28/2026
4.4.9	124	10/27/2026
4.4.8	249	10/26/2026
4.4.8-preview.1	95	10/26/2026
4.4.7	116	10/26/2026
4.4.7-preview.2	93	10/26/2026
4.4.7-preview.1	49	10/25/2026
4.4.6	94	10/25/2026
4.4.5	90	10/25/2026
4.4.4	1,007	10/24/2026
4.4.3	188	10/24/2026