Namespace Fdyay.IdentityServer.Models
Classes
- ApiResource
Models a physical API resource: a named audience with its own scopes and secrets.
- ApiScope
Models an OAuth 2.0 scope that can be requested for access tokens.
- AuthorizationCode
An issued authorization code awaiting exchange at the token endpoint.
- AuthorizationRequest
Details of a pending authorization request, for the login/consent UI.
- BackChannelAuthenticationRequest
A pending backchannel authentication request: what a client asked for on a user's behalf, and what that user has decided about it so far (OpenID Connect CIBA Core 1.0).
- ClaimComparer
Compares claims by type, value, and value type (ordinal).
- Client
A relying party / OAuth client registration.
- ClientClaim
A fixed claim that is always issued for a client.
- ClientExtensions
What a client's registration says about it, read the one way every caller reads it.
- Consent
A user's stored consent for a client's scopes.
- ConsentResponse
The user's decision on a pending authorization request.
- DeviceCode
A pending device authorization: what the device asked for, and what the user has decided so far.
- ErrorMessage
The error context carried server-side so the error page can retrieve it by an opaque id.
- ErrorMessage.Protocols
The protocol a failing request arrived on, so a reader can tell a SAML failure from an OIDC one.
- Grant
Consent a user has given to a client, as an account-management UI sees it.
- GrantTypes
Helper that maps grant type names to the allowed grant-type collections for a client.
- IdentityProvider
An external identity provider a host can add, change or remove without a restart.
- IdentityProviderName
A provider as the sign-in page needs it: enough to list it, not enough to use it.
- IdentityResource
Models an OpenID Connect identity resource (a set of identity claims).
- IdentityResources
Built-in standard OpenID Connect identity resources.
- IdentityResources.Address
The
addressscope.
- IdentityResources.Email
The
emailscope.
- IdentityResources.OpenId
The
openidscope. Always required; issues the subject claim.
- IdentityResources.Phone
The
phonescope.
- IdentityResources.Profile
The
profilescope.
- LogoutRequest
Details of a pending signout request, for the logout UI.
- Message<TModel>
Data carried across an interactive redirect, with when it was written. Duende's
Message<TModel>.
- OidcProvider
A dynamic OpenID Connect provider.
- ParsedSecret
A client or API credential taken off a request, before it has been checked against what is stored.
- RefreshToken
A refresh token that can be exchanged for new access/identity tokens.
- Resource
Base class for identity and API resources.
- Resources
The set of resources (identity resources, API scopes, API resources) relevant to a request.
- SamlLogoutNotificationResult
The logout requests for a session's SAML service providers, and how many could not be sent one.
- SamlLogoutRequestContext
One SAML service provider's logout request, ready for the browser to deliver.
- SamlProvider
A dynamic SAML 2.0 provider: an identity provider this server signs users in through as a service provider.
- SamlSpSessionData
A SAML service provider this session issued an assertion to, and what the assertion said.
- Secret
A shared secret, X.509 thumbprint, or JWK used to authenticate a client or API.
- ServerSideSession
A signed-in browser session, held server-side rather than only in the cookie.
- Token
An access or identity token prior to serialization/signing.
- UserSession
A server-side session, with the authentication ticket it holds.
Interfaces
- IAuthenticationContext
A pending request that a user has to interact with before it can be answered.
- IConnectedApplication
The application a protocol request is being served for.
- IIdentityProviderFactory
Makes the subclass a provider's kind registers from a row held as the base type.
Enums
- DPoPTokenExpirationValidationMode
How a DPoP proof is held to a time (RFC 9449 ยง11.1): by its own
iat, by a nonce this server issued, or both.
- InteractionError
The error returned to the client when an authorization request is denied.
- LogoutNotificationReason
Why a session ended, told to the relying parties notified about it. Duende 8.0.1's, measured.