Class ClientExtensions

Namespace

Fdyay.IdentityServer.Models

Assembly

Fdyay.IdentityServer.Core.dll

What a client's registration says about it, read the one way every caller reads it.

public static class ClientExtensions

Inheritance

object

ClientExtensions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Methods

GetKeysAsync(IEnumerable<Secret>)

The keys a client's secrets hold: its certificates' and then its JSON Web Keys. Duende's GetKeysAsync, measured.

public static Task<List<SecurityKey>> GetKeysAsync(this IEnumerable<Secret> secrets)

Parameters

secrets IEnumerable<Secret>

Returns

Task<List<SecurityKey>>

Remarks

What verifies a private_key_jwt assertion and a request object, and the same for both, as Duende reads them: an X509CertificateBase64 secret is an X509SecurityKey whose key id is the certificate's thumbprint, and a JsonWebKey secret a JsonWebKey. A certificate's validity period is enforced where the key is used, not here.

Where ours differs: a secret that does not read — bad base64, not a certificate, not a key — is skipped and the client's other keys still work. Duende's throws on it, and its callers refuse the client outright.