Table of Contents

Interface ISecretParser

Namespace
Fdyay.IdentityServer.Validation
Assembly
Fdyay.IdentityServer.AspNetCore.dll

Takes a client or API credential off a request, without checking it.

public interface ISecretParser

Remarks

Lives in the hosting assembly rather than the core, because a credential is presented over HTTP and parsing it needs the request. The validators it feeds are protocol-level and stay in the core.

Properties

AuthenticationMethods

The token_endpoint_auth_methods_supported values this parser implements.

IReadOnlyCollection<string> AuthenticationMethods { get; }

Property Value

IReadOnlyCollection<string>

Remarks

A collection rather than one value, because how a credential is presented and what it is checked against are not the same question. RFC 8705 defines two methods that arrive identically — a certificate on the connection — and differ only in whether the registration names the certificate or the name it bears.

Methods

ParseAsync(HttpContext, CancellationToken)

Returns the credential this parser recognises, or null when the request carries none of its kind.

Task<ParsedSecret?> ParseAsync(HttpContext context, CancellationToken cancellationToken = default)

Parameters

context HttpContext
cancellationToken CancellationToken

Returns

Task<ParsedSecret>