Interface IPushedAuthorizationRequestValidator

Namespace: Fdyay.IdentityServer.Validation

Assembly: Fdyay.IdentityServer.Core.dll

Validates a pushed authorization request before it is stored (RFC 9126 §2.1).

public interface IPushedAuthorizationRequestValidator

Remarks

Duende 8.0.1's IPushedAuthorizationRequestValidator, measured: no request_uri; a DPoP proof, when there is one, bounded, valid for this endpoint, and agreeing with dpop_jkt or supplying it; and then the whole authorize request validator, asked with PushedAuthorization — so a request that could never be honoured is refused when it is pushed, not when a user is sent to redeem it.

Methods

ValidateAsync(PushedAuthorizationRequestValidationContext, CancellationToken)

Validates a pushed request from an authenticated client.

Task<PushedAuthorizationValidationResult> ValidateAsync(PushedAuthorizationRequestValidationContext context, CancellationToken ct)

Parameters

context PushedAuthorizationRequestValidationContext: The pushed parameters, the client, and the DPoP proof and certificate the push came with.
ct CancellationToken: Cancels the validation.

Returns