Interface IBackchannelAuthenticationRequestIdValidator

Namespace: Fdyay.IdentityServer.Validation

Assembly: Fdyay.IdentityServer.Core.dll

Validates an auth_req_id polled at the token endpoint (CIBA Core §10–11).

public interface IBackchannelAuthenticationRequestIdValidator

Remarks

Duende 8.0.1's IBackchannelAuthenticationRequestIdValidator, measured: an unknown id, or another client's, is invalid_grant; an expired one expired_token; one not yet answered authorization_pending, or slow_down when polled too fast; one answered with nothing granted access_denied; a user the profile service no longer calls active (caller BackchannelAuthenticationRequestIdValidation) invalid_grant; otherwise the request is spent and the token request carries it, its user and its session.

Methods

ValidateAsync(BackchannelAuthenticationRequestIdValidationContext, CancellationToken)

Validates the context's auth_req_id and sets its Result.

Task ValidateAsync(BackchannelAuthenticationRequestIdValidationContext context, CancellationToken ct)

Parameters

context BackchannelAuthenticationRequestIdValidationContext: The presented id and the token request; the answer is written to its Result.
ct CancellationToken: Cancels the store lookups and the profile service call.

Returns