Class DefaultIdentityProviderConfigurationValidator

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.AspNetCore.dll

Duende's checks on a stored identity provider: a kind this host serves, a scheme, and each protocol's essentials.

public class DefaultIdentityProviderConfigurationValidator : IIdentityProviderConfigurationValidator

Inheritance

object

DefaultIdentityProviderConfigurationValidator

Implements

IIdentityProviderConfigurationValidator

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

Measured from Duende 8.0.1's DefaultIdentityProviderConfigurationValidator. The first two checks end validation at the first failure; OpenID Connect's four all run, so the last of them to fail names the message; SAML's stop at the first, as Duende's do.

Constructors

DefaultIdentityProviderConfigurationValidator(IOptions<DynamicProviderOptions>)

Creates the validator, as the container resolves it.

public DefaultIdentityProviderConfigurationValidator(IOptions<DynamicProviderOptions> options)

Parameters

options IOptions<DynamicProviderOptions>

The dynamic provider options, whose registered kinds a row's Type must be one of.

Methods

ValidateAsync(IdentityProviderConfigurationValidationContext, CancellationToken)

Validates the provider in context, recording any problem on it.

public virtual Task ValidateAsync(IdentityProviderConfigurationValidationContext context, CancellationToken cancellationToken = default)

Parameters

context IdentityProviderConfigurationValidationContext

cancellationToken CancellationToken

Returns

Task

Exceptions

ArgumentNullException

context is null.

ValidateOidcProviderAsync(IdentityProviderConfigurationValidationContext<OidcProvider>)

Checks an OpenID Connect provider. A host deriving from this class adds its own checks here.

protected virtual Task ValidateOidcProviderAsync(IdentityProviderConfigurationValidationContext<OidcProvider> context)

Parameters

context IdentityProviderConfigurationValidationContext<OidcProvider>

Returns

Task

ValidateSamlProviderAsync(IdentityProviderConfigurationValidationContext<SamlProvider>)

Checks a SAML 2.0 provider. A host deriving from this class adds its own checks here.

protected virtual Task ValidateSamlProviderAsync(IdentityProviderConfigurationValidationContext<SamlProvider> context)

Parameters

context IdentityProviderConfigurationValidationContext<SamlProvider>

Returns

Task

Remarks

Duende's seven, in its order and its words, each ending validation. One more, which Duende does not make: a row with no SigningCertificateBase64 is refused, because this server's service provider verifies every response against that key and has nowhere else to get it from. Accepted, such a row would be a button on the sign-in page leading to a refused assertion every time.