Class TokenCreationRequest

Namespace

Fdyay.IdentityServer.Services.Tokens

Assembly

Fdyay.IdentityServer.Core.dll

Inputs for creating an access or identity token.

public sealed class TokenCreationRequest

Inheritance

object

TokenCreationRequest

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Properties

AccessTokenLifetime

How long the access token lives, in seconds. The client's, unless set.

public int AccessTokenLifetime { get; set; }

Property Value

int

Remarks

Duende reads it off ValidatedRequest.AccessTokenLifetime; here the response generator copies it from the validated token request, where a hook may have changed it.

AccessTokenToHash

The access token value to hash into the identity token (at_hash).

public string? AccessTokenToHash { get; set; }

Property Value

string

AccessTokenType

Whether the access token is a JWT or a reference. The client's, unless set.

public IdentityServerConstants.AccessTokenType AccessTokenType { get; set; }

Property Value

IdentityServerConstants.AccessTokenType

Remarks

Copied from the validated token request, as AccessTokenLifetime is.

AuthenticationRequestId

The CIBA request the identity token answers, for a token delivered by push.

public string? AuthenticationRequestId { get; set; }

Property Value

string

Client

The client the token is issued to.

public Client Client { get; set; }

Property Value

Client

ClientClaims

The client claims the access token carries. The client's, unless set.

[SuppressMessage("Usage", "CA2227:Collection properties should be read only", Justification = "Copied from the validated request, which a hook may have replaced.")]
public ICollection<Claim> ClientClaims { get; set; }

Property Value

ICollection<Claim>

Remarks

Copied from the validated token request, as AccessTokenLifetime is.

Confirmation

The confirmation (cnf) to bind into the access token, as JSON. Null for a bearer token.

public string? Confirmation { get; set; }

Property Value

string

Description

The name the user gave the grant this token comes from. Duende's; copied to the token.

public string? Description { get; set; }

Property Value

string

IncludeAllIdentityClaims

Whether all identity claims should be included in the identity token.

public bool IncludeAllIdentityClaims { get; set; }

Property Value

bool

Issuer

The issuer to stamp on the token.

public string Issuer { get; set; }

Property Value

string

Nonce

The nonce to echo in the identity token.

public string? Nonce { get; set; }

Property Value

string

RefreshTokenToHash

The refresh token value to hash into the identity token (CIBA push's rt_hash).

public string? RefreshTokenToHash { get; set; }

Property Value

string

Resources

The resources granted for this token.

public Resources Resources { get; set; }

Property Value

Resources

Scopes

The granted scope values.

public ICollection<string> Scopes { get; set; }

Property Value

ICollection<string>

SessionId

The user's session the token is issued in, carried into the access and identity tokens as sid.

public string? SessionId { get; set; }

Property Value

string

Subject

The authenticated user, or null for client-only tokens.

public ClaimsPrincipal? Subject { get; set; }

Property Value

ClaimsPrincipal

ValidatedRequest

The validated request the token answers, handed to the profile service as its protocol request. Duende's.

public IValidatedRequest? ValidatedRequest { get; set; }

Property Value

IValidatedRequest

ValidatedResources

The resources the token is cut for, as validated, handed to the profile service. Duende's.

public ResourceValidationResult? ValidatedResources { get; set; }

Property Value

ResourceValidationResult