---
title: SAIF.NetCore.ServiceContracts dependencies
summary: Internal and external dependencies for this library.
status: draft
owner: Framework.NCore maintainers
last_reviewed: 2026-10-02
library: SAIF.NetCore.ServiceContracts
reference_type: package
---

# SAIF.NetCore.ServiceContracts dependencies

`SAIF.NetCore.ServiceContracts` has no internal SAIF dependencies — it is the foundation layer that every other `SAIF.NetCore.*` library depends on — and its only external dependencies are an unused third-party package reference and the implicit ASP.NET Core shared framework.

## Internal dependencies

This library has no internal dependencies. The project file declares no `<PackageReference>` to any other `SAIF.NetCore.*` package and no `<ProjectReference>`, which confirms the foundation-layer position documented in [`Architecture.md`](../../../Architecture.md). This package is consumed by 16 other in-repo libraries as a NuGet dependency rather than consuming any internal package itself*.

## External dependencies

| Dependency | Version | Usage |
| --- | --- | --- |
| `Microsoft.IdentityModel.Tokens` | `6.12.2` | Referenced via `<PackageReference>`, but the only file that uses it (`ISigningKeysCache.cs`) is excluded from compilation (`<Compile Remove>`); the reference still flows to consumers of this package as a transitive NuGet dependency even though no compiled code in this library uses it*. |
| `Microsoft.AspNetCore.App` | Shared framework (matches each target framework moniker) | `FrameworkReference` supplying `HttpContext`/`IHttpContextAccessor` and `AuthenticateResult`/`AuthenticationProperties`, used by several declared interfaces (`IErrorHandlerHook`, `IJwtAuthorizationCookieClaimService`, `ILoginRedirectService`, `ISaifLogService`, `IUrlCaseService`, `IWebRequestLogInfo`). |

## Dependency risks and notes
- This library is contract-only: it defines interfaces, DTOs, enums, and exception types but contains no service implementations, no `IServiceCollection` registrations, and issues no HTTP, database, or file I/O of its own, so it has no API dependencies of its own to document in an "API dependencies" section.
- `Microsoft.IdentityModel.Tokens` 6.12.2 is carried as a NuGet dependency of this package even though no compiled code references it; its current vulnerability-advisory status was not checked as part of this analysis**.
- `ISigningKeysCache.cs`, `SigningKeysCacheResult`, `ISigningKeysRetrievalService`, and the compiled `SigningKeyCacheStatus` enum suggest an abandoned or relocated signing-key-cache feature; it is unknown whether any consumer outside this repository relies on it**.
- Because 16 of the 19 libraries in this repository depend on this package, any change to its contracts has a wide blast radius across the framework*.

## Related documentation
- [Index](index.md)
- [Overview](overview.md)
- [Architecture](architecture.md)
- [Operations and processes](operations-processes.md)
- [Business rules](business-rules.md)
- [API reference](api/index.md)
- [SAIF.NetCore.AuthService dependencies](../saif-netcore-authservice/dependencies.md)

> **Note:** Statements marked with `*` were inferred from code structure, naming
> conventions, or contextual evidence where direct confirmation was not available
> in source artifacts. Statements marked with `**` could not be confirmed; treat
> as unknown until verified.

## Sources
- `src/SAIF.NetCore.ServiceContracts/SAIF.NetCore.ServiceContracts/SAIF.NetCore.ServiceContracts/SAIF.NetCore.ServiceContracts.csproj`
- `src/SAIF.NetCore.ServiceContracts/SAIF.NetCore.ServiceContracts/SAIF.NetCore.ServiceContracts/ISigningKeysCache.cs`
- `Architecture.md`