Table of Contents

Class PushedAuthorizationEndpoint

Namespace
Fdyay.IdentityServer.Endpoints
Assembly
Fdyay.IdentityServer.AspNetCore.dll

The OAuth 2.0 pushed authorization request endpoint (RFC 9126).

public sealed class PushedAuthorizationEndpoint : IEndpointHandler
Inheritance
PushedAuthorizationEndpoint
Implements
Inherited Members

Remarks

A client posts here, authenticated, with the parameters it would otherwise have put in the browser's query string, and gets back a single-use request_uri to send the user to instead. The parameters therefore never travel through the user agent, where they can be read, reordered or rewritten before they arrive.

Constructors

PushedAuthorizationEndpoint(IClientSecretValidator, ISecretsListParser, IPushedAuthorizationRequestValidator, IPushedAuthorizationResponseGenerator, IEventService)

Creates the endpoint from its services, as the container resolves it.

public PushedAuthorizationEndpoint(IClientSecretValidator clientValidator, ISecretsListParser secretParser, IPushedAuthorizationRequestValidator requestValidator, IPushedAuthorizationResponseGenerator responseGenerator, IEventService events)

Parameters

clientValidator IClientSecretValidator

Authenticates the client from the credential it presented.

secretParser ISecretsListParser

Reads the client's credential from the request.

requestValidator IPushedAuthorizationRequestValidator

Validates the pushed authorization request's parameters.

responseGenerator IPushedAuthorizationResponseGenerator

Stores the validated request and builds the response carrying its request_uri.

events IEventService

Receives the endpoint's success and failure events.

Methods

ProcessAsync(HttpContext)

Processes the request, or returns null to pass the request through.

public Task<IEndpointResult?> ProcessAsync(HttpContext context)

Parameters

context HttpContext

Returns

Task<IEndpointResult>