Interface ISecretParser
- Namespace
- Fdyay.IdentityServer.Validation
- Assembly
- Fdyay.IdentityServer.AspNetCore.dll
Takes a client or API credential off a request, without checking it.
public interface ISecretParser
Remarks
Lives in the hosting assembly rather than the core, because a credential is presented over HTTP and parsing it needs the request. The validators it feeds are protocol-level and stay in the core.
Properties
AuthenticationMethods
The token_endpoint_auth_methods_supported values this parser implements.
IReadOnlyCollection<string> AuthenticationMethods { get; }
Property Value
Remarks
A collection rather than one value, because how a credential is presented and what it is checked against are not the same question. RFC 8705 defines two methods that arrive identically — a certificate on the connection — and differ only in whether the registration names the certificate or the name it bears.
Methods
ParseAsync(HttpContext, CancellationToken)
Returns the credential this parser recognises, or null when the request carries none of its kind.
Task<ParsedSecret?> ParseAsync(HttpContext context, CancellationToken cancellationToken = default)
Parameters
contextHttpContextcancellationTokenCancellationToken