Class FormPostResult

Namespace

Fdyay.IdentityServer.Hosting

Assembly

Fdyay.IdentityServer.AspNetCore.dll

An authorization response delivered by the browser posting a form to the client (OAuth 2.0 Form Post Response Mode). Duende 8.0.1's page and headers, measured from its AuthorizeHttpWriter.

public sealed class FormPostResult : IEndpointResult

Inheritance

object

FormPostResult

Implements

IEndpointResult

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

The page posts itself on load, with a button for a browser that runs no script. Its policy names that one script by its hash and allows nothing else; it is never cached, because it carries a code; and it sends no referrer with the post. The parameters travel in the body rather than the URL, so they stay out of the client's logs and the browser's history — the reason ASP.NET Core's OpenID Connect handler asks for this mode by default.

Constructors

FormPostResult(string, IReadOnlyDictionary<string, string?>, CspOptions)

Holds the response to post.

public FormPostResult(string action, IReadOnlyDictionary<string, string?> fields, CspOptions csp)

Parameters

action string

The URL the form posts to: the client's redirect URI.

fields IReadOnlyDictionary<string, string>

The response parameters, each a hidden field; a null value is left out.

csp CspOptions

The content security policy options the page's policy is written for.

Methods

ExecuteAsync(HttpContext)

Writes the result to the response.

public Task ExecuteAsync(HttpContext context)

Parameters

context HttpContext

The request whose response is written.

Returns

Task