Class AuthorizationCode

Namespace

Fdyay.IdentityServer.Models

Assembly

Fdyay.IdentityServer.Core.dll

An issued authorization code awaiting exchange at the token endpoint.

public class AuthorizationCode

Inheritance

object

AuthorizationCode

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Properties

Claims

The subject's claims captured at authorization time.

public ICollection<Claim> Claims { get; set; }

Property Value

ICollection<Claim>

ClientId

The client the code was issued to.

public string ClientId { get; set; }

Property Value

string

CodeChallenge

The PKCE code challenge.

public string? CodeChallenge { get; set; }

Property Value

string

CodeChallengeMethod

The PKCE code challenge method (plain or S256).

public string? CodeChallengeMethod { get; set; }

Property Value

string

CreationTime

When the code was created (UTC).

public DateTime CreationTime { get; set; }

Property Value

DateTime

DPoPKeyThumbprint

The DPoP key this code may only be redeemed by (RFC 9449 §10).

public string? DPoPKeyThumbprint { get; set; }

Property Value

string

Remarks

Defence against a stolen code being redeemed under the thief's own key. PKCE stops the code being redeemed at all by anyone who lacks the verifier; this stops the token that comes back being bound to the wrong key where they do.

Description

The name the user gave this grant when approving it, for their list of grants. Duende's.

public string? Description { get; set; }

Property Value

string

IsOpenId

Whether the request included the openid scope.

public bool IsOpenId { get; set; }

Property Value

bool

Lifetime

The code lifetime in seconds.

public int Lifetime { get; set; }

Property Value

int

Nonce

The nonce to echo in the identity token.

public string? Nonce { get; set; }

Property Value

string

Properties

A host's own values, kept with the code until it is redeemed. Duende's.

public IDictionary<string, string> Properties { get; set; }

Property Value

IDictionary<string, string>

Remarks

Nothing here reads or writes them: they are stored with the code and read back with it, for a host that sets them where the code is made and reads them where it is redeemed (ValidatedTokenRequest.AuthorizationCode).

RedirectUri

The redirect URI the code was bound to.

public string RedirectUri { get; set; }

Property Value

string

RequestedResourceIndicators

The API the authorization request named as a resource indicator (RFC 8707), if it named one.

public ICollection<string> RequestedResourceIndicators { get; set; }

Property Value

ICollection<string>

Remarks

A collection, as in Duende, though this server accepts one indicator at the authorization endpoint: the shape leaves room for several without a change of type, and empty means the request named none.

RequestedScopes

The scopes granted.

public ICollection<string> RequestedScopes { get; set; }

Property Value

ICollection<string>

SessionId

The session id, if any.

public string? SessionId { get; set; }

Property Value

string

SubjectId

The subject id.

public string SubjectId { get; set; }

Property Value

string