class Duende.​IdentityModel.​Client.​BackchannelAuthenticationRequest

ClientNotificationToken

REQUIRED if the Client is registered to use Ping or Push modes. It is a bearer token provided by the Client that will be used by the OpenID Provider to authenticate the callback request to the Client. The length of the token MUST NOT exceed 1024 characters and it MUST conform to the syntax for Bearer credentials as defined in Section 2.1 of RFC6750.

AcrValues

OPTIONAL. Requested Authentication Context Class Reference values. A space-separated string that specifies the acr values that the OpenID Provider is being requested to use for processing this Authentication Request, with the values appearing in order of preference.

LoginHintToken

OPTIONAL. A token containing information identifying the end-user for whom authentication is being requested.

IdTokenHint

OPTIONAL. An ID Token previously issued to the Client by the OpenID Provider being passed back as a hint to identify the end-user for whom authentication is being requested.

LoginHint

OPTIONAL. A hint to the OpenID Provider regarding the end-user for whom authentication is being requested.

BindingMessage

OPTIONAL. A human-readable identifier or message intended to be displayed on both the consumption device and the authentication device to interlock them together for the transaction by way of a visual cue for the end-user.

UserCode

OPTIONAL. A secret code, such as a password or pin, that is known only to the user but verifiable by the OP.

RequestedExpiry

OPTIONAL. A positive integer allowing the client to request the expires_in value for the auth_req_id the server will return.

RequestObject

OPTIONAL. A signed authentication request is made by encoding all of the authentication request parameters as claims of a signed JWT with each parameter name as the claim name and its value as a JSON string.

Resource

List of requested resources

Address

Gets or sets the endpoint address (you can also set the RequestUri instead or leave blank to use the HttpClient base address).

ClientId

Gets or sets the client identifier.

ClientSecret

Gets or sets the client secret.

ClientAssertion

Gets or sets the client assertion.

ClientCredentialStyle

Gets or sets the client credential style (post body vs authorization header).

AuthorizationHeaderStyle

Gets or sets the basic authentication header style (classic HTTP vs OAuth 2).

DPoPProofToken

The DPoP proof token to use on the token endpoint.

ClientAssertionFactory

Gets or sets a factory function that creates a fresh <see cref="P:Duende.IdentityModel.Client.ProtocolRequest.ClientAssertion" /> on demand. When set, this factory is stored on the <see cref="T:System.Net.Http.HttpRequestMessage" /> options so that DPoP retry handlers can invoke it to obtain a new assertion (with a fresh <c>jti</c> and <c>iat</c> ) on each attempt, avoiding client-assertion replay rejected by servers that enforce uniqueness.

Parameters

Gets or sets additional protocol parameters.

Content

Headers

Method

Options

Properties

RequestUri

Version

VersionPolicy