Class HashedSharedSecretValidator

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.Core.dll

Checks a shared secret presented in the clear against the SHA-256 hashes stored for it.

public sealed class HashedSharedSecretValidator : ISecretValidator

Inheritance

object

HashedSharedSecretValidator

Implements

ISecretValidator

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Methods

ValidateAsync(IEnumerable<Secret>, ParsedSecret, CancellationToken)

Checks the presented credential against the stored secrets.

public Task<SecretValidationResult> ValidateAsync(IEnumerable<Secret> secrets, ParsedSecret parsedSecret, CancellationToken cancellationToken = default)

Parameters

secrets IEnumerable<Secret>

The stored secrets of the client or API — only unexpired ones, when called by SecretValidator.

parsedSecret ParsedSecret

The credential a secret parser read off the request.

cancellationToken CancellationToken

Cancels the check.

Returns

Task<SecretValidationResult>

Success when the credential matched one of secrets; failure otherwise, and for a credential type this validator does not handle.

Remarks

Only a parsed shared secret is considered, and only against secrets of type SharedSecret: the presented value's SHA-256 is compared, in constant time, with each of them.

Exceptions

ArgumentNullException

secrets or parsedSecret is null.