Class IdentityServerConstants

Namespace

Fdyay.IdentityServer

Assembly

Fdyay.IdentityServer.Core.dll

Well-known constants used throughout the identity server.

public static class IdentityServerConstants

Inheritance

object

IdentityServerConstants

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Fields

AccessTokenAudience

The composite format of the static audience, {0} being the issuer with a trailing slash; see StaticAudienceFor(string?).

public const string AccessTokenAudience = "{0}resources"

Field Value

string

DefaultCheckSessionCookieName

The default name of the cookie the check-session iframe reads; see CheckSessionCookieName.

public const string DefaultCheckSessionCookieName = "idsrv.session"

Field Value

string

DefaultCookieAuthenticationScheme

The cookie scheme the signed-in user's session lives in, registered by AddIdentityServerCookieAuthentication.

public const string DefaultCookieAuthenticationScheme = "idsrv"

Field Value

string

ExternalCookieAuthenticationScheme

The cookie scheme an external provider signs the user into while their sign-in is completed here, registered by AddIdentityServerCookieAuthentication.

public const string ExternalCookieAuthenticationScheme = "idsrv.external"

Field Value

string

LocalIdentityProvider

The idp value of a user who signed in with this server's own sign-in rather than an external provider.

public const string LocalIdentityProvider = "local"

Field Value

string

Methods

StaticAudienceFor(string?)

The static {issuer}/resources audience, for resource servers that validate it.

public static string StaticAudienceFor(string? issuer)

Parameters

issuer string

Returns

string

Remarks

One definition, because two readers now need it and they must agree. The token service stamps it onto every access token when EmitStaticAudienceClaim is on, and the introspection endpoint must not treat it as naming an API: it is the same value on every token this server issues, so an API whose name happened to equal it would match every token in existence. A second copy of this formatting that drifted from the first would reopen exactly that.