Table of Contents

Class CheckSessionEndpoint

Namespace
Fdyay.IdentityServer.Endpoints
Assembly
Fdyay.IdentityServer.AspNetCore.dll

Serves the check-session iframe (OpenID Connect Session Management 1.0 ยง4).

public sealed class CheckSessionEndpoint : IEndpointHandler
Inheritance
CheckSessionEndpoint
Implements
Inherited Members

Remarks

A relying party embeds this page and posts "{client_id} {session_state}" to it on a timer. The page recomputes the hash from the browser-state cookie it can read and answers changed, unchanged or error. Everything happens in the browser: no request reaches this server per poll, which is what makes polling at a few-second interval affordable.

Constructors

CheckSessionEndpoint(IOptions<IdentityServerOptions>)

Creates the endpoint, as the container resolves it.

public CheckSessionEndpoint(IOptions<IdentityServerOptions> options)

Parameters

options IOptions<IdentityServerOptions>

The server options: the browser-state cookie the page reads, and the content security policy it is served under.

Methods

ProcessAsync(HttpContext)

Processes the request, or returns null to pass the request through.

public Task<IEndpointResult?> ProcessAsync(HttpContext context)

Parameters

context HttpContext

Returns

Task<IEndpointResult>