Interface ISessionStateService
- Namespace
- Fdyay.IdentityServer.Services
- Assembly
- Fdyay.IdentityServer.AspNetCore.dll
The session_state half of OpenID Connect Session Management 1.0 — how a relying party polls whether
the session it authenticated under is still the current one.
public interface ISessionStateServiceRemarks
Distinct from front- and back-channel logout, which push. This is the pull side: the relying party embeds the check-session iframe and asks it, repeatedly, whether anything changed. It exists because the two push mechanisms only fire on a deliberate sign-out here, and say nothing about a session that ended some other way — an expired cookie, a sign-in as somebody else in another tab.
Methods
GetSessionState(string, string, string?)
Computes the session_state for an authorization response, issuing the browser-state cookie if the
session does not have one yet. Null when there is no session to report on.
string? GetSessionState(string clientId, string redirectUri, string? sessionId)Parameters
Returns
RemoveBrowserState()
Clears the browser state, so every relying party polling sees a change.
void RemoveBrowserState()