Interface IRedirectUriValidator

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.Core.dll

Decides whether a client may be sent back to a URI it names, after authorizing or after signing out.

public interface IRedirectUriValidator

Remarks

Duende 8.0.1's IRedirectUriValidator, measured: asked by the authorize request validator for redirect_uri and by the end-session endpoint for post_logout_redirect_uri, and here also by the return-URL parser, which re-reads a request's redirect URI for the interactive pages. What it answers is only whether the URI is one this client may use; this server's own policy on where a browser may be sent at all (ValidationOptions.InvalidRedirectUriPrefixes) still applies after it. Registered with AddRedirectUriValidator<T>(); the default is StrictRedirectUriValidator.

Methods

IsPostLogoutRedirectUriValidAsync(string, Client, CancellationToken)

Whether requestedUri is a post-logout redirect URI client may use.

Task<bool> IsPostLogoutRedirectUriValidAsync(string requestedUri, Client client, CancellationToken ct)

Parameters

requestedUri string

client Client

ct CancellationToken

Returns

Task<bool>

IsRedirectUriValidAsync(RedirectUriValidationContext, CancellationToken)

Whether the request's redirect URI is one its client may use, with the rest of the request to hand.

Task<bool> IsRedirectUriValidAsync(RedirectUriValidationContext context, CancellationToken ct)

Parameters

context RedirectUriValidationContext

ct CancellationToken

Returns

Task<bool>

Remarks

Answers as IsRedirectUriValidAsync(string, Client) unless a validator answers otherwise, as in Duende.

IsRedirectUriValidAsync(string, Client)

Whether requestedUri is a redirect URI client may use.

Task<bool> IsRedirectUriValidAsync(string requestedUri, Client client)

Parameters

requestedUri string

client Client

Returns

Task<bool>