Table of Contents

Class OidcConstants.BackChannelAuthenticationParameters

Namespace
Fdyay.IdentityServer
Assembly
Fdyay.IdentityServer.Core.dll

Parameters of a backchannel authentication request (OpenID Connect CIBA Core 1.0 §7.1).

public static class OidcConstants.BackChannelAuthenticationParameters
Inheritance
OidcConstants.BackChannelAuthenticationParameters
Inherited Members

Remarks

Each constant arrived with the code that reads it, because a constant for a parameter the endpoint ignores is a name promising a capability, which is what §1 of the parity matrix exists to remove: client_notification_token in 0.72.0, when the ping callback gave it a reader, id_token_hint in 0.74.0, when the endpoint learned to validate one, and user_code in 0.75.0, when a host could declare that its validator checks one.

Fields

AcrValues

The authentication context classes the client asks for, in order of preference, with the tenant: and idp: hints riding among them (OpenID Connect Core §3.1.2.1, CIBA Core §7.1).

public const string AcrValues = "acr_values"

Field Value

string

BindingMessage

A short message shown both on the consumption device and on the user's authentication device, so the user can tell the two are the same transaction (CIBA Core §7.1).

public const string BindingMessage = "binding_message"

Field Value

string

ClientNotificationToken

The token the client will authenticate our callback with (CIBA Core §7.1).

public const string ClientNotificationToken = "client_notification_token"

Field Value

string

Remarks

The client's own value, not ours. It is how the client knows a notification arriving at its endpoint came from a request it actually made, so it is required of the modes that get a callback and meaningless — and refused — for the one that does not.

IdTokenHint

An identity token this server issued to the client, naming the user (CIBA Core §7.1).

public const string IdTokenHint = "id_token_hint"

Field Value

string

LoginHint

A hint naming the user to be authenticated, such as an e-mail address (CIBA Core §7.1).

public const string LoginHint = "login_hint"

Field Value

string

LoginHintToken

A token naming the user to be authenticated, in a format the client and the server agree on (CIBA Core §7.1).

public const string LoginHintToken = "login_hint_token"

Field Value

string

Request

The whole request as a JWT the client signed (CIBA Core §7.1.1).

public const string Request = "request"

Field Value

string

RequestedExpiry

How long, in seconds, the client asks for the request to stay pending (CIBA Core §7.1). A value that is not a positive number is ignored, and the server's ceiling applies regardless.

public const string RequestedExpiry = "requested_expiry"

Field Value

string

Resource

RFC 8707: the API the grant this request creates is for.

public const string Resource = "resource"

Field Value

string

Scope

The scopes asked for, space-separated (CIBA Core §7.1).

public const string Scope = "scope"

Field Value

string

UserCode

A secret the user knows and the host can verify, gating the request (CIBA Core §7.1).

public const string UserCode = "user_code"

Field Value

string