Interface IJwtRequestValidator

Namespace: Fdyay.IdentityServer.Validation

Assembly: Fdyay.IdentityServer.Core.dll

Validates a request object: signed by the client, for this server, current, and not itself a reference.

public interface IJwtRequestValidator

Remarks

Duende 8.0.1's IJwtRequestValidator, measured: no longer than InputLengths.Jwt; signed by one of the client's JSON Web Keys with an algorithm in SupportedRequestObjectSigningAlgorithms; issued by the client, to this server's issuer, with an expiry; typed oauth-authz-req+jwt under strict JAR validation; and carrying neither request nor request_uri.

Methods

ValidateAsync(JwtRequestValidationContext, CancellationToken)

Validates the context's request object against its client and this server.

Task<JwtRequestValidationResult> ValidateAsync(JwtRequestValidationContext context, CancellationToken ct)

Parameters

context JwtRequestValidationContext: The object, the client that must have signed it, and how strictly to read it.
ct CancellationToken: Cancels the validation.

Returns