Overview

SCRIPE is a production-ready enterprise platform built with a Modular Monolith architecture. It provides everything you need to build scalable business applications authentication, authorization, multi-tenancy, audit logging, real-time events, and a comprehensive admin panel all out of the box. The platform runs as a single binary that can be deployed as a monolith or decomposed into microservices without code changes.

• Modular Monolith

  Isolated modules with clean boundaries develop, test, and deploy independently. Same binary, flexible deployment.

• CQRS + SCRIPE mediator

  Command/Query separation with a 4-behavior pipeline: validation, feature gating, caching, and performance monitoring.

• Enterprise Security

  Unified Policy-Based Access Control (PBAC) engine uniting Role-Based (RBAC), Group-Based (GBAC), and Attribute-Based (ABAC) Access Control. Includes 2FA, Field-Level Restrictions, Rate Limiting, Session Management, and immutable Audit Trails.

• Multi-Tenancy

  Row-level tenant isolation with EF Core global query filters. Per-tenant settings, branding, and data scoping.

• Flexible Database

  Switch between SQL Server, PostgreSQL, or Oracle. Run all modules in a single shared database (Single mode) or give each module its own database (Multi mode) — controlled by a single config toggle.

• Flexible Deployment

  Deploy as monolith, microservices, or hybrid via a single MODULE_NAME environment variable.

• Enterprise SSO & Identity Provider

  Native OIDC/OAuth2 Identity Provider enabling true Single Sign-On across your ecosystem. Act as a primary IDP (like Keycloak) managing external client applications seamlessly.

Architecture Topology

SCRIPE operates in three deployment modes controlled entirely by a single environment variable. The same compiled binary can run as a monolith (all modules), a microservice (single module), or an API gateway (YARP proxy).

Deployment Modes

The MODULE_NAME environment variable determines which modules load at startup. When empty, all modules register (monolith mode). When set to a module name, only that module loads (microservice mode). When set to 'Gateway', YARP reverse proxy activates.

var moduleName = Environment.GetEnvironmentVariable("MODULE_NAME") ?? "";
var isMonolith = string.IsNullOrEmpty(moduleName);
var isGateway = moduleName.Equals("Gateway", StringComparison.OrdinalIgnoreCase);

// MODULE_NAME is resolved as a server role.
// Identity/Auth roles intentionally load Identity + Entitlements for signup.
// Gateway loads no business modules and only maps YARP when ServiceDiscovery exists.

Technology Stack

Service Registration Order

The order of service registration in Program.cs is architecturally significant. Changing the order can cause runtime failures. Core infrastructure must register before modules, and SCRIPE mediator needs module assembly markers collected first.

Environment Profiles

Priority (highest wins):
  1. UserSecrets          (Development only)
  2. Environment Variables (prefix: SCRIPE_)
  3. appsettings.Secrets.json (optional)
  4. appsettings.json         (base)