Class X509Confirmation

Namespace

Fdyay.IdentityServer.Validation

Assembly

Fdyay.IdentityServer.Core.dll

Builds the RFC 8705 §3.1 confirmation that binds a token to the certificate that obtained it.

public static class X509Confirmation

Inheritance

object

X509Confirmation

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Methods

For(X509Certificate2)

The cnf value naming certificate, as JSON.

public static string For(X509Certificate2 certificate)

Parameters

certificate X509Certificate2

Returns

string

Remarks

The base64url SHA-256 of the DER certificate, which is not the hex thumbprint a certificate is registered by: the same hash, differently encoded, and a resource server comparing the two forms would reject every token it was given.