Class PushedAuthorizationFailureEvent
- Namespace
- Fdyay.IdentityServer.Events
- Assembly
- Fdyay.IdentityServer.Core.dll
A pushed authorization request was refused, at either end of its life.
public class PushedAuthorizationFailureEvent : Event- Inheritance
-
PushedAuthorizationFailureEvent
- Inherited Members
Remarks
Both ends raise it: the push endpoint, where a client is refused before it ever gets a reference, and the authorize endpoint, where a reference is refused when it comes back.
The refusal worth watching is a reference presented by a client that did not push it. Every other way a reference fails is somebody holding a stale link — expired, already redeemed, never issued, all ordinary things to be holding. A reference arriving from a different client is a value that has travelled, and 0.37.0 began refusing it without leaving anybody a way to know. This is that way.
The return-URL parser resolves the same references, to tell the login and consent pages which application is asking, and deliberately raises nothing: it runs once per render, so an event there would report one refused request several times and one resumed request as several successes.
Constructors
PushedAuthorizationFailureEvent(string?, string)
A pushed authorization request refused at the push endpoint or when its reference came back.
public PushedAuthorizationFailureEvent(string? clientId, string message)Parameters
clientIdstringThe client that asked, or null when the request named none.
messagestringWhy it was refused.
Properties
ClientId
The client that asked — which, at the authorize endpoint, is not always the one that pushed.
public string? ClientId { get; }