Interface IUserInfoRequestValidator

Namespace: Fdyay.IdentityServer.Validation

Assembly: Fdyay.IdentityServer.Core.dll

Validates a userinfo request's access token and finds the user it is about.

public interface IUserInfoRequestValidator

Remarks

Duende 8.0.1's IUserInfoRequestValidator, measured: the token must be valid and carry the openid scope (insufficient_scope otherwise) and a sub; the user is read from the server-side session the token names, when server-side sessions are on and the session is there, else from the token; and the profile service must still call the user active.

Methods

ValidateRequestAsync(string, CancellationToken)

Validates the access token presented at the UserInfo endpoint and finds its user.

Task<UserInfoRequestValidationResult> ValidateRequestAsync(string accessToken, CancellationToken ct)

Parameters

accessToken string: The access token, as presented.
ct CancellationToken: Cancels the token validation and the session and profile lookups.

Returns