Table of Contents

Class GrantsRevokedEvent

Namespace
Fdyay.IdentityServer.Events
Assembly
Fdyay.IdentityServer.Core.dll

A subject's grants were revoked.

public class GrantsRevokedEvent : Event
Inheritance
GrantsRevokedEvent
Inherited Members

Remarks

The most consequential thing a host can do to a subject here — every token, every refresh handle and every stored consent the filter matches — and the one an operator is most often asked to prove afterwards.

Raised in DefaultPersistedGrantService rather than in the interaction service above it, because that service delegates both of its revoking members here: an event raised there would miss every caller with a subject id and no request, which is the reason this service was extracted at all.

ClientId is null when the whole subject went. "One application was disconnected" and "everything this user had was revoked" are different events, and a placeholder would make the second read as the first.

Constructors

GrantsRevokedEvent(string, string?, string?)

A revocation of a subject's grants.

public GrantsRevokedEvent(string subjectId, string? clientId = null, string? sessionId = null)

Parameters

subjectId string

The subject whose grants were revoked.

clientId string

The one client whose grants went, or null when every client's did.

sessionId string

The browser session the revocation was scoped to, or null when it was not scoped to one.

Properties

ClientId

Null when every client's grants went.

public string? ClientId { get; }

Property Value

string

SessionId

Set when the revocation was scoped to one browser session — a sign-out rather than a disconnect.

public string? SessionId { get; }

Property Value

string

SubjectId

The subject whose grants were revoked.

public string SubjectId { get; }

Property Value

string