Table of Contents

Class JwtBearerClientAssertionSecretParser

Namespace
Fdyay.IdentityServer.Validation
Assembly
Fdyay.IdentityServer.AspNetCore.dll

Reads a private_key_jwt client assertion from the form body (RFC 7523).

public sealed class JwtBearerClientAssertionSecretParser : ISecretParser
Inheritance
JwtBearerClientAssertionSecretParser
Implements
Inherited Members

Properties

AuthenticationMethods

The token_endpoint_auth_methods_supported values this parser implements.

public IReadOnlyCollection<string> AuthenticationMethods { get; }

Property Value

IReadOnlyCollection<string>

Remarks

A collection rather than one value, because how a credential is presented and what it is checked against are not the same question. RFC 8705 defines two methods that arrive identically — a certificate on the connection — and differ only in whether the registration names the certificate or the name it bears.

Methods

ParseAsync(HttpContext, CancellationToken)

Returns the credential this parser recognises, or null when the request carries none of its kind.

public Task<ParsedSecret?> ParseAsync(HttpContext context, CancellationToken cancellationToken = default)

Parameters

context HttpContext
cancellationToken CancellationToken

Returns

Task<ParsedSecret>

Remarks

The client is the form's client_id, or the assertion's iss, read unverified, when there is none.

Exceptions

ArgumentNullException

context is null.