Class EndSessionEndpoint

Namespace

Fdyay.IdentityServer.Endpoints

Assembly

Fdyay.IdentityServer.AspNetCore.dll

The OpenID Connect RP-initiated logout (end session) endpoint.

public sealed class EndSessionEndpoint : IEndpointHandler

Inheritance

object

EndSessionEndpoint

Implements

IEndpointHandler

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

The session is only destroyed for a request that proves it came from a relying party — a verifiable id_token_hint. Anything else is handed to the logout page, which asks the user to confirm, so a cross-site GET cannot end the session.

Constructors

EndSessionEndpoint(IEndSessionRequestValidator, ILogoutContextFactory, ISignOutService, IUiLocalesService, IOptions<IdentityServerOptions>)

Creates the endpoint from its services, as the container resolves it.

[ActivatorUtilitiesConstructor]
public EndSessionEndpoint(IEndSessionRequestValidator requestValidator, ILogoutContextFactory logoutContexts, ISignOutService signOut, IUiLocalesService uiLocales, IOptions<IdentityServerOptions> options)

Parameters

requestValidator IEndSessionRequestValidator

Validates the end session request, its id_token_hint among it.

logoutContexts ILogoutContextFactory

Builds the logout context the logout page is handed.

signOut ISignOutService

Ends the user's session for a request proven to come from a relying party.

uiLocales IUiLocalesService

Passes the request's ui_locales on to the logout page.

options IOptions<IdentityServerOptions>

The server options: where the logout page is and the parameter it takes the logout id in.

EndSessionEndpoint(IEndSessionRequestValidator, ILogoutContextFactory, ISignOutService, IOptions<IdentityServerOptions>)

The constructor before 0.156.0, kept for a host that builds the endpoint itself.

public EndSessionEndpoint(IEndSessionRequestValidator requestValidator, ILogoutContextFactory logoutContexts, ISignOutService signOut, IOptions<IdentityServerOptions> options)

Parameters

requestValidator IEndSessionRequestValidator

logoutContexts ILogoutContextFactory

signOut ISignOutService

options IOptions<IdentityServerOptions>

Remarks

Tells the logout page no ui_locales, as before 0.156.0.

Methods

ProcessAsync(HttpContext)

Processes the request, or returns null to pass the request through.

public Task<IEndpointResult?> ProcessAsync(HttpContext context)

Parameters

context HttpContext

Returns

Task<IEndpointResult>