Class DelegationContext

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.Core.dll

Who is asking to act for whom, at a token exchange carrying an actor_token.

public sealed class DelegationContext

Inheritance

object

DelegationContext

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Properties

Actor

The validated actor token's claims: who is doing the acting.

public required ClaimsPrincipal Actor { get; init; }

Property Value

ClaimsPrincipal

Remarks

The whole principal rather than an id, because what identifies an actor is not fixed. A service presenting a client_credentials token has a client_id and no sub; a service acting under a user's identity has both. A policy that wants to key on something else — a role, an issuer, a claim this library has never heard of — has it here.

Client

The client performing the exchange, already authenticated.

public required Client Client { get; init; }

Property Value

Client

SubjectId

The subject the issued token will be about — the user being acted for.

public required string SubjectId { get; init; }

Property Value

string