Interface IBackchannelAuthenticationRequestValidator
- Namespace
- Fdyay.IdentityServer.Validation
- Assembly
- Fdyay.IdentityServer.Core.dll
Validates a backchannel authentication request (OpenID Connect CIBA Core 1.0 ยง7.1).
public interface IBackchannelAuthenticationRequestValidatorRemarks
Duende 8.0.1's IBackchannelAuthenticationRequestValidator, measured: a client registered for the CIBA grant; a
request object, or every parameter in the form; a scope, bounded, with openid (invalid_request
otherwise); the client's scopes and resource indicators; acr_values, bounded, with tenant: and idp:
lifted out; exactly one hint, each bounded, an id_token_hint this server issued; user_code and
binding_message bounded; the user resolved by IBackchannelAuthenticationUserValidator, whose errors
other than CIBA's own are unknown_user_id; and the host's ICustomBackchannelAuthenticationValidator
last. The default is in the ASP.NET Core assembly: it reads this server's issuer and the connection's certificate.
Methods
ValidateRequestAsync(IReadOnlyDictionary<string, string>, ClientSecretValidationResult, CancellationToken)
Validates a backchannel authentication request from an authenticated client.
Task<BackchannelAuthenticationRequestValidationResult> ValidateRequestAsync(IReadOnlyDictionary<string, string> parameters, ClientSecretValidationResult clientValidationResult, CancellationToken ct)Parameters
parametersIReadOnlyDictionary<string, string>The request's form parameters.
clientValidationResultClientSecretValidationResultThe outcome of authenticating the client that sent the request.
ctCancellationTokenCancels the validation.
Returns
- Task<BackchannelAuthenticationRequestValidationResult>
The validated request, or the error to answer with.