Indotalent Enterprise Kit Documentation

Authentication

Full-featured authentication with ASP.NET Core Identity, JWT access tokens with refresh token rotation, and optional Firebase SSO.

// 1. Login → POST /api/auth/login with email+password
// 2. Response returns: { token, refreshToken, expiresAt, user }
// 3. When access token expires → POST /api/auth/refresh
//    with { refreshToken } → new token pair (rotation)
// 4. Refresh token is hashed (SHA256) and stored in DB

Role-Based Authorization

Pre-configured roles: Guest, Member, and Admin. New users automatically receive the Guest role.

public static class ApplicationRoles
{
    public const string AdminConst  = "Admin";
    public const string MemberConst = "Member";
    public const string GuestConst  = "Guest";
}

SSO Firebase

Indotalent supports Firebase Single Sign-On (SSO) as an optional authentication method. When enabled, users can sign in using their Google account via Firebase Authentication. The Firebase configuration is stored in appsettings.json under the SsoFirebase section.

To enable Firebase SSO, configure the following in appsettings.json:

"SsoFirebase": {
    "IsUsed": true,
    "ProjectId": "xxx",
    "ApiKey": "xxx",
    "AuthDomain": "xxx.firebaseapp.com",
    "StorageBucket": "xxx.firebasestorage.app",
    "MessagingSenderId": "xxx",
    "AppId": "xxx"
}

Set "IsUsed": true to enable Firebase SSO. Replace the placeholder values (xxx) with your actual Firebase project credentials from the Firebase Console. Set "IsUsed": false to disable Firebase SSO and use only the built-in Identity authentication.

AutoNumber Generation

Entities implementing IHasAutoNumber get auto-generated codes like COMP-0001.

Background Jobs (Hangfire)

Hangfire with built-in dashboard at /hangfire (Admin only). Supports recurring, fire-and-forget, and delayed jobs.

Multi-Database

Switch between InMemory, SQL Server, and PostgreSQL with a single config change. The application supports three database providers — simply toggle "IsUsed" to switch between them.

Configure your database provider in appsettings.json under DatabaseSettings:

"DatabaseSettings": {
    // InMemory (default, no external DB needed)
    "InMemory": {
        "IsUsed": true,
        "ConnectionString": "IndotalentDb",
        "TimeoutInSeconds": 1800
    },
    // Microsoft SQL Server
    "MsSQL": {
        "IsUsed": false,
        "ConnectionString": "Server=localhost\\SQLEXPRESS;Database=MyDb;Trusted_Connection=True;TrustServerCertificate=True",
        "TimeoutInSeconds": 1800
    },
    // PostgreSQL
    "PostgreSQL": {
        "IsUsed": false,
        "ConnectionString": "Host=localhost;Database=MyDb;Username=postgres;Password=yourpassword",
        "TimeoutInSeconds": 1800
    }
}

To switch providers, set the desired provider's "IsUsed" to true and the others to false. Only one provider can be active at a time. Update the ConnectionString to match your database server credentials.

Demo Mode

Indotalent includes a Demo Mode feature that, when enabled, automatically seeds the database with dummy demo data on application startup. This is useful for testing, presentations, or evaluation purposes without needing to manually enter data.

Configure Demo Mode in appsettings.json:

"DemoMode": {
    "IsDemo": true
}

Set "IsDemo": true to enable Demo Mode — the application will seed dummy data (sample users, roles, and demo records) on every startup. Set "IsDemo": false to disable it and start with a clean database.

AI Chat

Indotalent includes an AI Chat feature that can be enabled by configuring your preferred AI provider's API key. The application supports multiple AI providers including ChatGPT, Claude, Gemini, and DeepSeek.

Configure AI Chat in appsettings.json under AiSettings:

"AiSettings": {
    // Choose your provider: "ChatGPT", "Claude", "Gemini", or "DeepSeek"
    "Provider": "ChatGPT",
    "ChatGPT": {
        "ApiKey": "sk-your-chatgpt-api-key",
        "Model": "gpt-4o"
    },
    "Claude": {
        "ApiKey": "sk-ant-your-claude-api-key",
        "Model": "claude-3-opus-20240229"
    },
    "Gemini": {
        "ApiKey": "your-gemini-api-key",
        "Model": "gemini-1.5-pro"
    },
    "DeepSeek": {
        "ApiKey": "your-deepseek-api-key",
        "Model": "deepseek-v4-flash"
    }
}

To enable AI Chat, set the "Provider" field to your chosen provider name and fill in the corresponding "ApiKey" with your actual API key from that provider. Leave the API keys empty to disable the AI Chat feature.

Email Delivery

Multi-provider email service supporting SendGrid, Mailgun, SMTP, and Mailjet. Toggle "IsUsed" to switch between providers.

Configure email delivery in appsettings.json under EmailSettings:

"EmailSettings": {
    // SendGrid
    "SendGrid": {
        "IsUsed": false,
        "ApiKey": "SG.your-sendgrid-api-key",
        "FromEmail": "noreply@email.com"
    },
    // Mailgun
    "Mailgun": {
        "IsUsed": false,
        "ApiKey": "key-your-mailgun-api-key",
        "Domain": "mg.yourdomain.com",
        "FromEmail": "noreply@email.com"
    },
    // Mailjet
    "Mailjet": {
        "IsUsed": false,
        "ApiKey": "mj-your-public-key",
        "ApiSecret": "mj-your-private-key",
        "FromEmail": "noreply@email.com"
    },
    // SMTP (default)
    "Smtp": {
        "IsUsed": true,
        "Host": "smtp.gmail.com",
        "Port": 465,
        "UserName": "your-email@gmail.com",
        "Password": "your-app-password",
        "FromAddress": "your-email@gmail.com",
        "FromName": "no-reply"
    }
}

To switch email providers, set the desired provider's "IsUsed" to true and the others to false. Only one provider can be active at a time. Fill in the API keys and credentials for your chosen provider.

File Upload / Download

File storage service supporting local file system with upload, download, delete operations.

Health Checks

Built-in health check endpoints with dashboard UI at /Admin/HealthCheck/Index.

Logging (Serilog)

Structured logging with Serilog. Writes to rolling files with automatic 3-day cleanup via Hangfire.

Rate Limiting

Four rate limiting policies using System.Threading.RateLimiting, configurable via appsettings.json.

Functional Overview

Asset Manager is a complete IT asset lifecycle management solution. It provides centralized master data for branches, departments, manufacturers, vendors, and depreciation profiles, then links them together through asset models and individual asset records. Every asset moves through a defined lifecycle, can be assigned to employees, and carries the purchase, warranty, and end-of-life information needed for accurate tracking and planning.

Branch

The Branch feature manages the company's physical locations. Each branch records its street address, city, state, postal code, country, and the phone and email contacts that employees and vendors can reach. Branches provide the organizational anchor for employee assignment and for understanding where assets are located.

Key capabilities:

• Maintain a master list of all company locations
• Capture complete address and contact information per location
• Associate employees and assets with a specific branch
• Attach images and documents to a branch record

Department

The Department feature organizes the company into functional units such as Information Technology, Human Resources, Finance, and Operations. Every employee is assigned to a department, which makes it easy to see who is accountable for an asset and how equipment is distributed across the organization.

Key capabilities:

• Maintain a master list of organizational units
• Assign employees to their department
• Support department-level reporting and accountability
• Attach images and documents to a department record

Employee

The Employee feature bridges user accounts and the asset inventory. Each employee has an HR profile with an employee number, full name, and summary, and is linked to a branch and a department. These profiles are the people to whom assets are assigned.

Key capabilities:

• Register employees with HR profile data
• Link each employee to a branch and department
• Serve as the assignment target for asset records
• Provide the foundation for the My Asset self-service experience

Manufacture

The Manufacture feature maintains the master list of equipment brands and manufacturers, such as Dell, Apple, and Lenovo. Asset models reference a manufacturer so the inventory always carries consistent brand information without repeated free-text entry.

Key capabilities:

• Maintain a master list of equipment manufacturers
• Link asset models to their manufacturer
• Keep brand information consistent across the inventory
• Attach images and documents to a manufacturer record

Vendor

The Vendor feature tracks the suppliers that provide hardware, software, and services. Each vendor records its address, phone, website, and a named contact person. Purchase records on assets reference the vendor, giving a complete procurement history.

Key capabilities:

• Maintain a master list of approved suppliers
• Capture contact person details for each vendor
• Reference vendors from asset purchase records
• Attach images and documents to a vendor record

Depreciation

The Depreciation feature defines how the value of assets declines over time. Depreciation profiles, such as a three-year or five-year linear schedule, are applied to asset models so finance teams can plan replacement cycles and understand asset value consistently.

Key capabilities:

• Define depreciation profiles by amount or percentage
• Apply profiles to asset models
• Support value planning and replacement budgeting
• Attach images and documents to a depreciation profile

Asset Model Group

The Asset Model Group feature provides the top-level classification for the asset catalog. Groups such as Computers, Networking, Peripherals, and Software organize asset models into broad categories that are easy to browse and report on.

Key capabilities:

• Maintain high-level categories for the asset catalog
• Organize asset models into logical groupings
• Support category-level filtering and reporting
• Attach images and documents to a group record

Asset Model Sub Group

The Asset Model Sub Group feature refines the catalog with finer-grained categories inside each group. For example, the Computers group can contain sub groups for Laptops, Desktops, and Servers, letting the team classify equipment precisely before it reaches the asset level.

Key capabilities:

• Organize asset models within a parent group
• Provide precise classification for the catalog
• Support detailed filtering and reporting
• Attach images and documents to a sub group record

Asset Model

The Asset Model feature is the catalog of equipment types the organization standardizes on, such as a Dell Latitude 5420 laptop or a Cisco Catalyst 9200 switch. Each model belongs to a group and sub group, references a manufacturer and depreciation profile, and serves as the template for individual asset records.

Key capabilities:

• Define standard equipment types with specifications
• Link each model to group, sub group, manufacturer, and depreciation profile
• Use models as the basis for creating asset records
• Attach images and documents to a model record

Asset

The Asset feature is the heart of Asset Manager. Each asset record represents one physical item with a unique tag and serial number, a link to its model, and full procurement information including purchase date, order number, supplier, cost, and warranty period. Assets move through defined lifecycle stages and can be assigned to employees.

Key capabilities:

• Track the full asset lifecycle: Ready to Assign, Assigned, Repair, Quarantine, and Missing
• Enforce assignment rules, including reassignment and return workflows
• Record purchase, warranty, and end-of-life information per asset
• Capture BYOD status and full specifications
• Attach documents and images to each asset record
• Apply assignment control so an active asset cannot be assigned to a second person

My Asset

My Asset is the self-service portal for employees. It shows only the assets currently assigned to the logged-in user, giving each person a clear view of the equipment they are responsible for. Guests and administrators use this portal as the personal inventory view.

Key capabilities:

• Show only assets assigned to the logged-in user
• Provide a read-only view of assigned equipment and its status
• Give guests and administrators an immediate personal inventory
• Reduce helpdesk volume by answering the question "what do I have?"