Namespace Fdyay.IdentityServer.Validation
Classes
- AccessTokenValidationResult
The outcome of validating an access token.
- ApiSecretValidationResult
The outcome of authenticating an API resource at the introspection endpoint.
- ApiSecretValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- AuthorizeRequestValidationResult
The outcome of validating an authorize request.
- BackChannelAuthenticationUserValidationContext
The hints a client sent to say who it wants authenticated.
- BackchannelAuthenticationRequestIdValidationContext
An
auth_req_idpresented at the token endpoint, the request it came on, and what validating it found.
- BackchannelAuthenticationRequestIdValidator
Duende's default
auth_req_idvalidator.
- BackchannelAuthenticationRequestValidationResult
The outcome of validating a backchannel authentication request.
- BackchannelAuthenticationRequestValidator
Duende's default backchannel authentication request validator.
- BackchannelAuthenticationUserValidationResult
Who the hints identify, or why they identify nobody.
- BasicAuthenticationSecretParser
Reads
client_secret_basiccredentials from theAuthorizationheader.
- BuiltInGrantTypes
The grants this server implements itself, before anything a host adds.
- ClientConfigurationValidationContext
A client registration being checked, and what the check found.
- ClientSecretValidationResult
The outcome of authenticating a client at the token endpoint.
- ClientSecretValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- CustomAuthorizeRequestValidationContext
What a custom authorize request validator is handed, and what it answers through.
- CustomBackchannelAuthenticationRequestValidationContext
What a custom validator is handed, and what it answers through.
- CustomTokenRequestValidationContext
What a custom token request validator is handed, and what it answers through.
- DPoPConfirmation
Builds the RFC 9449 §6.1 confirmation that binds a token to the key its proof was signed with.
- DPoPProofValidationContext
What a proof has to be checked against: the request it claims to be for.
- DPoPProofValidationResult
The outcome of validating a proof, and what was read from it on the way.
- DefaultAuthorizeRequestValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DefaultClientConfigurationValidator
Refuses a client registration that cannot work, in Duende's order and with Duende's messages.
- DefaultCustomAuthorizeRequestValidator
Accepts every request. Duende's default.
- DefaultCustomBackchannelAuthenticationValidator
Accepts every request and adds nothing. Duende's default.
- DefaultCustomTokenRequestValidator
Accepts every request and adds nothing. Duende's default.
- DefaultCustomTokenValidator
Lets every token stand as validated. Duende's default, open to be derived from as Duende's is.
- DefaultDPoPProofValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DefaultIdentityProviderConfigurationValidator
Duende's checks on a stored identity provider: a kind this host serves, a scheme, and each protocol's essentials.
- DefaultIssuerPathValidator
Duende's default: no path is valid; otherwise it must be the issuer's own path, ignoring case.
- DefaultResourceValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DefaultScopeParser
Takes every scope value as it is. Duende's default, open to be derived from to parse some of them.
- DefaultScopeParser.ParseScopeContext
One value being parsed, and what the parser made of it.
- DefaultSenderConstraintValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DefaultTokenRequestValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DefaultTokenValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- DelegationContext
Who is asking to act for whom, at a token exchange carrying an
actor_token.
- DeviceAuthorizationRequestValidationResult
What validating a device authorization request found.
- DeviceAuthorizationRequestValidator
Duende's default device authorization request validator.
- DeviceCodeValidationContext
A device code presented at the token endpoint, the request it came on, and what validating it found.
- DeviceCodeValidator
Duende's default device code validator.
- EndSessionHintValidationContext
A valid
id_token_hint, the signed-in user and their session, for deciding whether the hint names them.
- EndSessionHintValidationResult
Whether an
id_token_hintmay end the session it is presented against.
- EndSessionRequestValidator
Duende's default end-session request validator.
- EndSessionValidationResult
What validating an end-session request found.
- ExtensionGrantValidationContext
What a client sent to an extension grant, and who it authenticated as.
- ExtensionGrantValidationResult
Who an extension grant resolved to, or why it resolved to nobody.
- HashedSharedSecretValidator
Checks a shared secret presented in the clear against the SHA-256 hashes stored for it.
- IdentityProviderConfigurationValidationContext
A provider of any kind being validated.
- IdentityProviderConfigurationValidationContext<T>
A provider being validated, and what validating it found.
- IdentityTokenValidationResult
The outcome of validating an identity token presented back to this server as a hint.
- IntrospectionRequestValidationContext
An introspection request, and who made it.
- IntrospectionRequestValidationResult
What an introspection request found.
- IntrospectionRequestValidator
Duende's default introspection request validator.
- JwtBearerClientAssertionSecretParser
Reads a
private_key_jwtclient assertion from the form body (RFC 7523).
- JwtRequestUriHttpClient
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- JwtRequestValidationContext
A request object (RFC 9101) or a signed CIBA request, the client it names, and how strictly to read it.
- JwtRequestValidationResult
What validating a request object found: its parameters, without the claims that belong to the JWT.
- JwtRequestValidator
Duende's default request object validator.
- MutualTlsSecretParser
Reads a client certificate off the TLS connection (RFC 8705).
- NopClientConfigurationValidator
Accepts every client registration. Duende's, for a host that wants no checks.
- ParsedScopeValidationError
A scope value a parser refused, and why.
- ParsedScopeValue
One scope value as a request named it, the scope it asks for, and the parameter it carries.
- ParsedScopesResult
What a scope parser made of a request's scope values.
- PostBodySecretParser
Reads
client_secret_postcredentials from the form body.
- PresentedAccessToken
An access token as it was presented, and how.
- PrivateKeyJwtSecretValidator
Verifies a
private_key_jwtclient assertion against the client's registered JWK secrets.
- PushedAuthorizationRequestValidationContext
A pushed authorization request, as an authenticated client pushed it (RFC 9126 §2.1).
- PushedAuthorizationRequestValidator
Duende's default pushed authorization request validator.
- PushedAuthorizationValidationResult
What validating a pushed request found.
- RedirectUriValidationContext
A redirect URI to validate, the client naming it, and the request it came in.
- RequestObjectResult
The outcome of resolving a JAR request object into authorization request parameters.
- RequestObjectValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- ResourceIndicatorRefusal
Why a resource indicator was refused: the error code and a description for the client.
- ResourceIndicatorValidation
The rules a
resourceindicator (RFC 8707) is held to wherever a request may carry one.
- ResourceValidationRequest
The scopes and resource indicators a client asked for, to be validated together.
- ResourceValidationResult
The outcome of validating requested scopes against a client and the resource store.
- ScopeClaims
Reads the scopes off a validated access token's claims, in either shape they can arrive in.
- SecretParser
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- SecretValidationResult
The outcome of checking a presented credential against the secrets stored for a client or API.
- SecretValidator
Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.
- SenderConstraintResult
Whether the presenter of a token holds what the token is bound to.
- StrictRedirectUriValidator
A redirect URI is valid if it is one the client registered, character for character.
- StrictRedirectUriValidatorAppAuth
StrictRedirectUriValidator, and for a native client that registered
http://127.0.0.1, that address on any port — RFC 8252 §7.3's loopback redirect.
- TokenExchangeGrantValidator
RFC 8693 token exchange — impersonation.
- TokenRequestValidationResult
The outcome of validating a token request.
- TokenRevocationRequestValidationResult
A revocation request, validated.
- TokenRevocationRequestValidator
Duende's default revocation request validator.
- UserInfoRequestValidationResult
A userinfo request, validated: the token, and the user it is about.
- UserInfoRequestValidator
Duende's default userinfo request validator.
- ValidatedAuthorizeRequest
A validated authorize request.
- ValidatedAuthorizeRequestExtensions
What an interaction generator does to a request once it has acted on part of it, and the
acr_valueshints. Duende's.
- ValidatedBackchannelAuthenticationRequest
A backchannel authentication request as this server validated it, before it is stored.
- ValidatedDeviceAuthorizationRequest
A device authorization request, as validated (RFC 8628 §3.1).
- ValidatedEndSessionRequest
An end-session request (OpenID Connect RP-Initiated Logout 1.0 §2), as validated.
- ValidatedPushedAuthorizationRequest
A pushed request that may be stored: its client and its parameters.
- ValidatedTokenRequest
A validated token request.
- X509Confirmation
Builds the RFC 8705 §3.1 confirmation that binds a token to the certificate that obtained it.
- X509NameSecretValidator
Checks a client certificate's subject distinguished name against the names registered for the client (RFC 8705
tls_client_auth).
- X509ThumbprintSecretValidator
Checks a client certificate against the SHA-256 thumbprints registered for the client (RFC 8705).
Interfaces
- IApiSecretValidator
Authenticates an API resource from a credential taken off the request.
- IAuthorizeRequestValidator
Validates authorize endpoint requests.
- IBackchannelAuthenticationRequestIdValidator
Validates an
auth_req_idpolled at the token endpoint (CIBA Core §10–11).
- IBackchannelAuthenticationRequestValidator
Validates a backchannel authentication request (OpenID Connect CIBA Core 1.0 §7.1).
- IBackchannelAuthenticationUserValidator
Resolves a client's hints about a user to a subject this server can authenticate.
- IClientConfigurationValidator
Decides whether a client registration can be served.
- IClientSecretValidator
Authenticates a client from a credential taken off the request.
- ICustomAuthorizeRequestValidator
A host's own checks on an authorize request, after this server's.
- ICustomBackchannelAuthenticationValidator
A host's own checks on a backchannel authentication request, after this server's.
- ICustomTokenRequestValidator
A host's own checks on a token request, after this server's.
- ICustomTokenValidator
A host's own checks on a token this server has validated, after its own.
- IDPoPProofValidator
Validates a DPoP proof (RFC 9449 §4.3).
- IDelegationPolicy
Decides whether an actor may act for a subject (RFC 8693 delegation).
- IDeviceAuthorizationRequestValidator
Validates a device authorization request.
- IDeviceCodeValidator
Validates a device code presented at the token endpoint (RFC 8628 §3.4–3.5).
- IEndSessionRequestValidator
Validates an end-session request.
- IExtensionGrantValidator
Implements a grant this server does not have, for a host that needs one.
- IIdentityProviderConfigurationValidator
Decides whether a stored identity provider can be served, each time it is read.
- IIntrospectionRequestValidator
Validates an introspection request and reads the token it names.
- IIssuerPathValidator
Whether a path after
/.well-known/oauth-authorization-servernames this server's issuer.
- IJwtRequestUriHttpClient
Fetches a JAR request object from the URL a client published it at (RFC 9101 §5.2.2).
- IJwtRequestValidator
Validates a request object: signed by the client, for this server, current, and not itself a reference.
- IPushedAuthorizationRequestValidator
Validates a pushed authorization request before it is stored (RFC 9126 §2.1).
- IRedirectUriValidator
Decides whether a client may be sent back to a URI it names, after authorizing or after signing out.
- IRequestObjectValidator
Resolves a JWT-Secured Authorization Request (JAR, RFC 9101) into the parameters it carries.
- IResourceValidator
Validates requested scopes against a client and the resource store.
- IScopeParser
Reads the scope values a request names into the scope each one asks for, and any parameter it carries.
- ISecretParser
Takes a client or API credential off a request, without checking it.
- ISecretValidator
Checks one kind of presented credential against stored secrets.
- ISecretsListParser
Takes a credential off a request using every registered ISecretParser.
- ISecretsListValidator
Checks a presented credential against every registered ISecretValidator.
- ISenderConstraintValidator
Checks a presented access token against the
cnfit carries.
- ITokenRequestValidator
Validates token endpoint requests for an authenticated client.
- ITokenRevocationRequestValidator
Validates a token revocation request (RFC 7009).
- ITokenValidator
Validates access tokens (self-contained JWTs and reference handles).
- IUserInfoRequestValidator
Validates a userinfo request's access token and finds the user it is about.
- IValidatedRequest
What every validated protocol request knows, whichever protocol it came in by.
Enums
- AuthorizeRequestType
Where an authorize request came from: the authorize endpoint, a push, or a push being redeemed.
- EndSessionHintValidationOutcome
How an
id_token_hintstands against the session it is asked to end.
- IntrospectionRequestValidationFailureReason
Why a token is not active, or why an introspection request was refused. Duende's.