Class ProtocolRoutePaths

Namespace

Fdyay.IdentityServer.Hosting

Assembly

Fdyay.IdentityServer.AspNetCore.dll

Well-known protocol route paths (relative, without a leading slash).

public static class ProtocolRoutePaths

Inheritance

object

ProtocolRoutePaths

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Fields

Authorize

The authorization endpoint's path (RFC 6749 §3.1).

public const string Authorize = "connect/authorize"

Field Value

string

BackchannelAuthentication

The backchannel authentication endpoint's path (OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0).

public const string BackchannelAuthentication = "connect/ciba"

Field Value

string

CheckSession

The check-session iframe's path (OpenID Connect Session Management 1.0).

public const string CheckSession = "connect/checksession"

Field Value

string

DeviceAuthorization

The device authorization endpoint's path (RFC 8628 §3.1).

public const string DeviceAuthorization = "connect/deviceauthorization"

Field Value

string

DiscoveryConfiguration

The OpenID Connect discovery document's path (OpenID Connect Discovery 1.0 §4).

public const string DiscoveryConfiguration = ".well-known/openid-configuration"

Field Value

string

DiscoveryWebKeys

The JSON Web Key Set's path, beneath the discovery document's; advertised as jwks_uri.

public const string DiscoveryWebKeys = ".well-known/openid-configuration/jwks"

Field Value

string

EndSession

The end session endpoint's path (OpenID Connect RP-Initiated Logout 1.0).

public const string EndSession = "connect/endsession"

Field Value

string

Introspection

The token introspection endpoint's path (RFC 7662).

public const string Introspection = "connect/introspect"

Field Value

string

OAuthMetadata

RFC 8414's well-known path, matched with any issuer path after it.

public const string OAuthMetadata = ".well-known/oauth-authorization-server"

Field Value

string

PushedAuthorization

The pushed authorization request endpoint's path (RFC 9126).

public const string PushedAuthorization = "connect/par"

Field Value

string

Revocation

The token revocation endpoint's path (RFC 7009).

public const string Revocation = "connect/revocation"

Field Value

string

Token

The token endpoint's path (RFC 6749 §3.2).

public const string Token = "connect/token"

Field Value

string

UserInfo

The UserInfo endpoint's path (OpenID Connect Core 1.0 §5.3).

public const string UserInfo = "connect/userinfo"

Field Value

string

Properties

MutualTlsAliased

The endpoints that are also served under the mTLS alias when it is enabled, paired with the discovery member each is advertised as.

public static IReadOnlyList<(string DiscoveryMember, string Path)> MutualTlsAliased { get; }

Property Value

IReadOnlyList<(string DiscoveryMember, string Path)>

Remarks

One list, read by both the router and the discovery document, so that an endpoint cannot be routable at an alias nobody is told about or advertised at one that does not answer.

Only the endpoints a client calls directly with its credentials. The authorize and end-session endpoints are reached by a browser redirect, and userinfo by a token rather than a client credential, so a certificate at those adds nothing and asking a browser for one would prompt the user.

Methods

MutualTlsAlias(string)

The mTLS alias of a protocol path: connect/token becomes connect/mtls/token.

public static string MutualTlsAlias(string path)

Parameters

path string

Returns

string