While some methods of SqlExpression<T> supports up to 15 generic parameters (Where, And, Or) others like Select, SelectDistinct and GroupBy only supports a couple. When building complex queries, it's easy to select data from more than 7 tables, or group by fields from more than 4 tables.

Could you implement more Select, SelectDistinct and GroupBy overloads like you did for Where, And and Or?

There is no specific number of parameters needed, but I think that the default 15 is a good start.

Right now, bools are serialized uppercase since that's the default ToString behavior of .NET.

Consider changing this behavior by checking for bool when serializing and using .ToString().ToLower(), or introduce a setting to control this. It's web standard to use lowercase bools in query strings.

More info/discussion:
https://github.com/ServiceStack/Issues/issues/586

Add SAML 2.0 as built in auth provider. Really useful for Azure AD SSO.

It would be a good idea for users when using Service Stack Authentication to have functionality like Asp.net Identity to Verify their account, reset their password.

In order to improve security it would be beneficial to change cookie names from const to a configurable option. It would help mask the presence of service stack and improve security in accordance with OWASP recommendations - https://www.owasp.org/index.php/SessionManagementCheatSheet#SessionIDNameFingerprinting

Hi

In my application user can define multiple filters for specific type. I would like to somehow combine these queries in single one.

SqlExpression<Notice> query1 = Db.From<Notice>(s=>s.param1 == 2);
// ...queries are more complicated but result type is same
SqlExpression<Notice> query2 = Db.From<Notice>(s=>s.param1 == 3 && s.param2 == 3);

SqlExpression<Notice> unionAll = query1.UnionAll(query2);
var result = Db.Select(unionAll);

Add OKTA as a built-in authentication provider.

Add a MQ Server for MSMQ that implements ServiceStack's Messaging API: http://docs.servicestack.net/messaging

With .NET Core not initially having support for Windows Authentication using the System.Directory assemblies, I would like to request the addition of a new LDAP Authentication Provider based on the Novell.Directory.Ldap.NETStandard (https://github.com/dsbenghe/Novell.Directory.Ldap.NETStandard) project. This will allow developers to update to the latest ServiceStack while still providing a way to authenticate and authorize against a legacy/non-Azure Active Directory.

We have message-level encryption and the corresponding .Net client library to use it. But I'd love to be able to call encrypted services from JavaScript. Ideally add to ss-utils.js, or because the encryption can get bulky, into a new ss-encrypt-utils.js.

The c# SDK is seriously lagging in documentation. By that I mean IntelliSense documentation: it would be awsome with some "in line" documentation for methods and properties in the SDK

Take a project like http://www.mattjcowan.com/funcoding/2013/05/11/restful-api-and-ui-for-typed-views-and-typed-lists/
and lift it to the next level.
Purpose: Point ActiveScaffold with AutoCrud to your database, and you get a half sensible CRUD web interface to maintain it. In other words, an instant backoffice.
This is orthogonal to any other API usage of ServiceStack.

Inspired by the Rails equivalent "https://github.com/activescaffold/active_scaffold&quot; that is very nicely designed, with both configuration and override possibilities.

I've just stumbled upon Facebook's GraphQL and it's pretty slick.
The ability to query a ServiceStack endpoint using GraphQL would be a great addition (maybe similar to AutoQuery?) If ORMLite could also populate an object graph using a GraphQL query...

Using servicestack client in mobile development with Xamarin gives so much benefits and caching dramatically improves performance and user experience.
It would be nice to have same caching support for all clients (.NET, JAVA, ..)

"OpenID Connect (OIDC) is an authentication layer on top of OAuth 2.0, an authorization framework." The benefit to developers and consumers is a more simplified way to add a new Auth provider which would provide some standard user info.
http://openid.net/connect/

I've started working with request batching, which is a really nice feature. Everything works, but there two improvements I'd like to see.

Firstly, for IReturnVoid requests there is SendAllOneWay, but there is no async version of that method.

Secondly, I'd like to be able to specify a http Verb with the SendAll methods. The implementation should select the correct method in the service, both when calling a single request method multiple times, but also for the batched method. Right now the batched service methods always need to be Any(), it would be nice to be able to have Delete(OrderID[] orders).

Much like you have created a RedisSentinel object ... I have a need for a RedisCluster object that supports the new feature which is coming in v3.0. Thanks.

Swagger now support oAuth login page to create a access_token to apply to a oAuth protected API: http://developers-blog.helloreverb.com/enabling-oauth-with-swagger/

Please could you add a similar capability to ServiceSatck.SwaggerFeature that enables SS developers to add a similar capability to their own APIS that are protected by oAuth.

Support to automatically update a db schema based on changes such as: adding/renaming and possibly removing a property or class.