Table of Contents

Namespace Fdyay.IdentityServer.Services

Namespaces

Fdyay.IdentityServer.Services.KeyManagement
Fdyay.IdentityServer.Services.Tokens

Classes

BackChannelAuthenticationInteractionService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

BackChannelAuthenticationRequestContext

A pending backchannel authentication request, resolved for the page that asks a user to answer it.

BackChannelLogoutRequest

One client to be told, server to server, that a session has ended. Duende's.

CachingCorsPolicyService

Answers from CorsPolicyCache where it can, and from the decorated service otherwise.

ConsentMessage

An authorization decision, carried from the consent UI back to the authorize endpoint.

CorsPolicyCache

Holds the origins an ICorsPolicyService has already allowed, and for how much longer.

DataProtectionGrantDataProtector

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultAuthorizationCodeStore

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultBackChannelAuthenticationNotificationHttpClient

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultBackChannelLogoutHttpClient

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultBackChannelLogoutService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultConsentService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultCorsPolicyService

Allows a fixed list of origins, or every origin.

DefaultDeviceFlowCodeService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultHandleGenerationService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultIdentityServerInteractionService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultPersistedGrantService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultProfileService

Default profile service: issues the subject's claims filtered by the requested claim types.

DefaultReplayCache

The replay cache, kept in IDistributedCache so every instance sees what any has seen. Duende's.

DefaultSessionCoordinationService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultSessionManagementService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultSignOutService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultUiLocalesService

Duende's default: the first supported ui_locales tag, in ASP.NET Core's request-culture cookie.

DefaultUserCodeService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultUserConsentStore

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DefaultUserSession

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DeviceFlowAuthorizationRequest

A pending device authorization, resolved for the page that asks the user to approve it.

DeviceFlowInteractionService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

DistributedBackchannelAuthenticationThrottlingService

CIBA's polling throttle, kept in IDistributedCache. Duende's.

DistributedDeviceFlowThrottlingService

The device flow's polling throttle, kept in IDistributedCache. Duende's.

ExternalUserSignIn

Who an external provider says the user is.

HttpEventService

Adds the request's identity and addresses to every event raised during one.

IdentityServerTools

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

InMemoryBackChannelAuthenticationThrottlingService

In-process throttle, keyed on the auth_req_id.

InMemoryCorsPolicyService

Allows the origins the registered clients declare in AllowedCorsOrigins.

InMemoryDeviceFlowThrottlingService

In-process throttle, keyed on the device code.

InMemoryMessageStore<TModel>

The default in-process message store.

InMemoryReplayCache

An in-process replay cache.

IsActiveContext

Context passed to IsActiveAsync(IsActiveContext, CancellationToken).

LogoutNotificationContext

The session whose end has to be announced, captured before the cookie was cleared.

NumericUserCodeGenerator

Nine digits, as Duende's NumericUserCodeGenerator: for a device with a numeric keypad.

OidcReturnUrlParser

The return URLs of the OpenID Connect authorize endpoint.

ProfileDataRequestContext

Context passed to GetProfileDataAsync(ProfileDataRequestContext, CancellationToken).

ProfileDataRequestContextExtensions

Helpers for the shapes a profile service implementation keeps needing.

ProtectedDataMessageStore<TModel>

A message store that keeps nothing: the message, protected, is its own id. Duende's, for a farm.

ReadableUserCodeGenerator

Twelve characters from an alphabet without the ones misread off a screen: this server's default.

RemoveSessionsContext

Which sessions RemoveSessionsAsync(RemoveSessionsContext, CancellationToken) ends, for which clients, and which of the four things it does about them. Duende's.

ReturnUrlParser

Puts a return URL to every registered IReturnUrlParser.

ServerSideSessionCleanup

Removes server-side sessions that have expired, and cleans up after each one.

ServerSideTicketStore

The seam that turns the session cookie into a reference to a stored session.

SessionStateService

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

SessionValidationRequest

A client's token, asked about the session it was issued in.

UserCode

The one form of a user code that this server stores and compares.

UserSignInResult

A sign-in that happened, naming the user, or one that did not, saying why.

Interfaces

IAuthorizationCodeStore

Stores and retrieves authorization codes.

IBackChannelAuthenticationNotificationHttpClient

Tells one client that one of its backchannel authentication requests has been answered.

IBackChannelLogoutHttpClient

Delivers one logout token to one relying party's back-channel logout endpoint.

IBackChannelLogoutService

Tells each client in the session, server to server, that the session has ended (OpenID Connect Back-Channel Logout 1.0).

IBackchannelAuthenticationInteractionService

Surfaces pending backchannel requests to the UI, and records the user's answer.

IBackchannelAuthenticationThrottlingService

Decides whether a CIBA client is polling faster than it was told to (CIBA Core §10.2).

IBackchannelAuthenticationUserNotificationService

Tells a user that a client is waiting on them to approve something.

IConsentService

Decides whether a request needs the user's consent, and records the answer.

ICorsPolicyService

Decides whether a CORS origin is allowed for browser-based clients.

IDeviceFlowCodeService

Device authorizations, kept so that the store never holds a code as issued. Duende's.

IDeviceFlowInteractionService

Surfaces a pending device authorization to the UI, and records the user's answer.

IDeviceFlowThrottlingService

Decides whether a device is polling faster than it was told to (RFC 8628 §3.5).

IGrantDataProtector

Protects and unprotects the Data a persisted grant carries.

IHandleGenerationService

Mints the opaque handles this server hands out.

IIdentityServerInteractionService

Surfaces protocol request context to the interactive UI (login, consent, logout).

IIdentityServerTools

Issues a token signed by this server, for a host that is not answering a protocol request.

ILogoutContextFactory

Captures the current session as a logout id, attributed to a client the protocol has verified.

ILogoutNotificationContextFactory

Reads a logout id back into the session details the back-channel notification needs.

IMessageStore<TModel>

Carries a short-lived message across an interactive redirect, keyed by an opaque id.

IPersistedGrantService

Reads and revokes a subject's grants, for a caller that names the subject.

IProfileService

Provides identity information (claims) about users to the token pipeline.

IReplayCache

Remembers values that must not be accepted twice.

IReturnUrlParser

Recognises the return URLs of one protocol, and describes the request a return URL names.

ISamlLogoutNotificationService

Builds the logout requests that tell a session's SAML service providers it has ended.

ISamlSignInDenialService

Records a user's denial of a pending SAML sign-in, for the sign-on endpoint to answer the service provider with.

IServerSideTicketStore

The seam that turns the session cookie into a reference to a stored session.

ISessionCoordinationService

Ending a session is more than deleting a row, and this is the rest of it.

ISessionManagementService

Listing and ending sessions from outside the browser holding them.

ISessionStateService

The session_state half of OpenID Connect Session Management 1.0 — how a relying party polls whether the session it authenticated under is still the current one.

ISignOutService

Ends the local session and tells everyone who needs to know that it ended.

IUiLocalesService

Carries a request's ui_locales to the interaction pages. Duende's.

IUserCodeGenerator

Makes user codes of one type (Duende's IUserCodeGenerator).

IUserCodeService

Finds the generator for a user code type (Duende's IUserCodeService).

IUserConsentStore

Stores and retrieves users' consent decisions.

IUserSession

Tracks what the signed-in browser session is, and which clients it has authenticated.

IUserSignInService

Signs a user in to this server's session against whichever accounts the host keeps.

Enums

SessionValidationType

The kind of token a session is validated for.