AuthKits · rian-be · Sep 15, 2026 · Sep 14, 2026 · Sep 14, 2026 · Sep 14, 2026
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -21,6 +21,7 @@
     <PackageVersion Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.0" />
+    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.0" />
 
     <PackageVersion Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.14.0" />

diff --git a/src/Host/Configuration/Authentication/AuthorizationPolicyCollisionGuard.cs b/src/Host/Configuration/Authentication/AuthorizationPolicyCollisionGuard.cs
@@ -1,5 +1,6 @@
 using System.Collections;
 using System.Reflection;
+using AuthKit.Plugins.Abstractions.Contracts.PluginContract;
 using Host.Plugins.Loading;
 using Microsoft.AspNetCore.Authorization;
 
@@ -14,7 +15,7 @@ namespace Host.Configuration.Authentication;
 /// silently replaces a previously registered policy when the same name is added twice, which
 /// would let a plugin silently overwrite another plugin's policy. To keep collisions explicit,
 /// the host snapshots the policy map before and after each plugin's
-/// <see cref="AuthKit.Plugins.Abstractions.Contracts.IAuthKitPlugin.ConfigureAuthorization"/> hook
+/// <see cref="IAuthKitPlugin.ConfigureAuthorization"/> hook
 /// and fails startup when a name already owned by another plugin is registered again.
 /// </para>
 /// <para>

diff --git a/src/Host/Configuration/Pipeline/AppMiddlewareConfiguration.cs b/src/Host/Configuration/Pipeline/AppMiddlewareConfiguration.cs
@@ -4,6 +4,7 @@
 using Host.Security.Middleware;
 using AuthKit.Plugins.Abstractions;
 using AuthKit.Plugins.Abstractions.Contracts;
+using AuthKit.Plugins.Abstractions.Contracts.PluginContract;
 
 namespace Host.Configuration.Pipeline;
 
@@ -19,7 +20,7 @@ namespace Host.Configuration.Pipeline;
 /// <para>
 /// New pipeline hooks are inserted at their strongly typed
 /// <see cref="PluginPipelinePosition"/>. Plugins at the same position are
-/// ordered by stable plugin ID. Legacy <see cref="IAuthKitPlugin.MiddlewareType"/>
+/// ordered by stable plugin ID. Legacy <see cref="AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin.MiddlewareType"/>
 /// middleware remains in its original slot unless the plugin opts into a new
 /// application or pipeline hook.
 /// </para>

diff --git a/src/Host/Plugins/Configuration/PluginApplicationConfiguration.cs b/src/Host/Plugins/Configuration/PluginApplicationConfiguration.cs
@@ -2,6 +2,7 @@
 using AuthKit.Plugins.Abstractions;
 using AuthKit.Plugins.Abstractions.Contracts;
 using Host.Plugins.Loading;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Configuration;
 

diff --git a/src/Host/Plugins/Configuration/PluginConfigurationInvoker.cs b/src/Host/Plugins/Configuration/PluginConfigurationInvoker.cs
@@ -1,6 +1,7 @@
 using System.Reflection;
 using AuthKit.Plugins.Abstractions.Contracts;
 using AuthKit.Plugins.Abstractions.Contracts.Plugins;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Configuration;
 

diff --git a/src/Host/Plugins/Contract/PluginContractValidator.cs b/src/Host/Plugins/Contract/PluginContractValidator.cs
@@ -2,6 +2,7 @@
 using AuthKit.Plugins.Abstractions.Contracts;
 using AuthKit.Plugins.Abstractions.Contracts.SecuritySchemes;
 using Microsoft.Extensions.Logging;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Contract;
 

diff --git a/src/Host/Plugins/Lifecycle/PluginLifecycleHostedService.cs b/src/Host/Plugins/Lifecycle/PluginLifecycleHostedService.cs
@@ -1,5 +1,6 @@
 using AuthKit.Plugins.Abstractions.Contracts;
 using Host.Plugins.Loading;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Lifecycle;
 

diff --git a/src/Host/Plugins/Loading/LoadedPlugin.cs b/src/Host/Plugins/Loading/LoadedPlugin.cs
@@ -1,5 +1,6 @@
 using System.Reflection;
 using AuthKit.Plugins.Abstractions.Contracts;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Loading;
 

diff --git a/src/Host/Plugins/Loading/PluginLoader.cs b/src/Host/Plugins/Loading/PluginLoader.cs
@@ -5,6 +5,7 @@
 using AuthKit.Plugins.Abstractions.Models;
 using Host.Plugins.Contract;
 using Microsoft.Extensions.Logging;
+using IAuthKitPlugin = AuthKit.Plugins.Abstractions.Contracts.PluginContract.IAuthKitPlugin;
 
 namespace Host.Plugins.Loading;
 

diff --git a/src/Host/appsettings.json b/src/Host/appsettings.json
@@ -2,8 +2,10 @@
   "ConnectionStrings": {
     "Marten": "Host=authdev-db;Port=5432;Database=AuthDev;Username=postgres;Password=postgres"
   },
-  "AuthKit": {
-    "MaxDeveloperTokens": 3
+  "Plugins": {
+    "authkit.devtokens": {
+      "MaxDeveloperTokens": 3
+    }
   },
   "Encryption": {
     "AES_MASTER_KEY": "Tww4kOE+310tZvqXvw1tg0779qccuy8t4vrYthcPP7c="

diff --git a/src/Plugins/Abstractions/AuthKitApiKeyLocation.cs b/src/Plugins/Abstractions/AuthKitApiKeyLocation.cs
@@ -1,3 +1,5 @@
+using AuthKit.Plugins.Abstractions.Contracts.SecuritySchemes;
+
 namespace AuthKit.Plugins.Abstractions;
 
 /// <summary>