Interface IAuthorizeRequestValidator

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.Core.dll

Validates authorize endpoint requests.

public interface IAuthorizeRequestValidator

Methods

ValidateAsync(IReadOnlyDictionary<string, string>, ClaimsPrincipal?, AuthorizeRequestType, IEnumerable<Claim>, CancellationToken)

Validates a request whose parameters were read, wholly or partly, from a request object.

Task<AuthorizeRequestValidationResult> ValidateAsync(IReadOnlyDictionary<string, string> parameters, ClaimsPrincipal? subject, AuthorizeRequestType authorizeRequestType, IEnumerable<Claim> requestObjectValues, CancellationToken cancellationToken)

Parameters

parameters IReadOnlyDictionary<string, string>

The request's parameters, the request object's merged in.

subject ClaimsPrincipal

The signed-in user, when there is one.

authorizeRequestType AuthorizeRequestType

Where the request came from.

requestObjectValues IEnumerable<Claim>

The claims of the request object, for RequestObjectValues and the redirect URI validator's RequestObjectValues.

cancellationToken CancellationToken

Cancels the validation.

Returns

Task<AuthorizeRequestValidationResult>

Remarks

This server's: Duende's validator reads the request object itself, and here the endpoint resolves it first and hands its claims on through this. A validator that does not implement it is asked without them.

ValidateAsync(IReadOnlyDictionary<string, string>, ClaimsPrincipal?, AuthorizeRequestType, CancellationToken)

Task<AuthorizeRequestValidationResult> ValidateAsync(IReadOnlyDictionary<string, string> parameters, ClaimsPrincipal? subject, AuthorizeRequestType authorizeRequestType = AuthorizeRequestType.Authorize, CancellationToken cancellationToken = default)

Parameters

parameters IReadOnlyDictionary<string, string>

The request's parameters.

subject ClaimsPrincipal

The signed-in user, when there is one.

authorizeRequestType AuthorizeRequestType

Where the request came from, as Duende's validator is told: a push is validated before it is stored, and the redirect URI validator may treat a pushed request differently (AllowUnregisteredPushedRedirectUris).

cancellationToken CancellationToken

Cancels the validation.

Returns

Task<AuthorizeRequestValidationResult>