Interface IIntrospectionRequestValidator
- Namespace
- Fdyay.IdentityServer.Validation
- Assembly
- Fdyay.IdentityServer.Core.dll
Validates an introspection request and reads the token it names.
public interface IIntrospectionRequestValidator
Remarks
Duende 8.0.1's IIntrospectionRequestValidator, measured: an API resource may introspect access tokens; a client may
introspect its own access tokens and its own refresh tokens, trying the kind token_type_hint names first. No token
is a refused request (missing_token); a token that does not validate is an inactive one.
Methods
ValidateAsync(IntrospectionRequestValidationContext, CancellationToken)
Reads the token the request names and decides whether it is active for the caller.
Task<IntrospectionRequestValidationResult> ValidateAsync(IntrospectionRequestValidationContext context, CancellationToken ct)
Parameters
contextIntrospectionRequestValidationContextThe request's form and the caller — an API resource or a client, exactly one of them.
ctCancellationTokenCancels the token validation.
Returns
- Task<IntrospectionRequestValidationResult>
The token's activity and claims, or a refused request when no token was named.