Class BackchannelAuthenticationUserValidationResult
- Namespace
- Fdyay.IdentityServer.Validation
- Assembly
- Fdyay.IdentityServer.Core.dll
Who the hints identify, or why they identify nobody.
public sealed class BackchannelAuthenticationUserValidationResult
- Inheritance
-
BackchannelAuthenticationUserValidationResult
- Inherited Members
Properties
Error
The error to answer the client with, when no subject was found.
public string? Error { get; init; }
Property Value
ErrorDescription
An optional description, which is returned to the client as sent.
public string? ErrorDescription { get; init; }
Property Value
SubjectId
The subject the request is for, when one was found.
public string? SubjectId { get; init; }
Property Value
Methods
Denied(string?)
The hints were understood and this server will not act on them.
public static BackchannelAuthenticationUserValidationResult Denied(string? description = null)
Parameters
descriptionstring
Returns
InvalidUserCode(string?)
The user code is not this user's (CIBA Core §13).
public static BackchannelAuthenticationUserValidationResult InvalidUserCode(string? description = null)
Parameters
descriptionstring
Returns
Remarks
Answered the same whether the user has a code and this is not it, or has none at all — telling those apart would let a client learn which users have one.
MissingUserCode(string?)
This user's requests must carry a user code, and this one did not (CIBA Core §13).
public static BackchannelAuthenticationUserValidationResult MissingUserCode(string? description = null)
Parameters
descriptionstring
Returns
Success(string)
The hints identify this subject.
public static BackchannelAuthenticationUserValidationResult Success(string subjectId)
Parameters
subjectIdstring
Returns
UnknownUser(string?)
The hints identify nobody this server knows about (CIBA Core §13).
public static BackchannelAuthenticationUserValidationResult UnknownUser(string? description = null)
Parameters
descriptionstring
Returns
Remarks
Its own error code because it is the one failure the client can act on: the request was well formed and the answer is that nobody here matches. Whether that is worth saying out loud is a host's decision — answering it tells an unauthenticated-to-you caller which identifiers exist, and CIBA's client authentication is what makes it a reasonable thing to say to this caller.