Class ClientConfigurationValidator

Namespace

Fdyay.IdentityServer.Services.KeyManagement

Assembly

Fdyay.IdentityServer.Core.dll

DefaultClientConfigurationValidator, and an access token may not outlive the signing key that signs it.

public class ClientConfigurationValidator : DefaultClientConfigurationValidator, IClientConfigurationValidator

Inheritance

object

DefaultClientConfigurationValidator

ClientConfigurationValidator

Implements

IClientConfigurationValidator

Inherited Members

DefaultClientConfigurationValidator.Options

DefaultClientConfigurationValidator.ValidateAsync(ClientConfigurationValidationContext, CancellationToken)

DefaultClientConfigurationValidator.ValidateGrantTypesAsync(ClientConfigurationValidationContext)

DefaultClientConfigurationValidator.ValidateRedirectUriAsync(ClientConfigurationValidationContext)

DefaultClientConfigurationValidator.ValidateAllowedCorsOriginsAsync(ClientConfigurationValidationContext)

DefaultClientConfigurationValidator.ValidateUriSchemesAsync(ClientConfigurationValidationContext)

DefaultClientConfigurationValidator.ValidateSecretsAsync(ClientConfigurationValidationContext)

DefaultClientConfigurationValidator.ValidatePropertiesAsync(ClientConfigurationValidationContext)

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

Duende 8.0.1's Services.KeyManagement.ClientConfigurationValidator, measured: after the default's checks, a client whose AccessTokenLifetime exceeds KeyRetirementAge is refused, since a token it was issued would still be in use after its key is no longer published. Registered by nothing, as in Duende: a host that manages keys automatically opts in with AddClientConfigurationValidator<ClientConfigurationValidator>().

Constructors

ClientConfigurationValidator(IOptions<IdentityServerOptions>)

A validator that reads KeyRetirementAge from options.

public ClientConfigurationValidator(IOptions<IdentityServerOptions> options)

Parameters

options IOptions<IdentityServerOptions>

The server's options.

Methods

ValidateLifetimesAsync(ClientConfigurationValidationContext)

Its token lifetimes must be positive, and its refresh lifetimes not negative.

protected override Task ValidateLifetimesAsync(ClientConfigurationValidationContext context)

Parameters

context ClientConfigurationValidationContext

Returns

Task

Remarks

Duende's, measured, quirk and all: a device code lifetime refused does not end the check, so a refresh lifetime refused after it is the message that stands.