Early Preview

This is currently very much a preview. Please feel free to try things out, but don't be upset if anything is not yet working. Feedback is welcome over on our GitHub Dicussions page.

Duende.IdentityServer

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

Author Duende Software
Version 7.4.5
Tags OAuth 2.0 OpenID Connect Security Identity IdentityServer ASP.NET Core

Public Types

Duende

class License
Models the license for IdentityServer.

Duende.​IdentityServer

interface IClock
Abstraction for the date/time.
class IdentityServerConstants
class IdentityServerLicense
Models the license for IdentityServer.
class IdentityServerTools
Class for useful helpers for interacting with IdentityServer
class IdentityServerUser
Model properties of an IdentityServer user
interface IIdentityServerTools
Useful helpers for interacting with IdentityServer.
class Telemetry
Telemetry helpers
class Tracing
Constants for tracing

Duende.​IdentityServer.​Configuration

class AuthenticationOptions
Configures the login and logout views and behavior.
class CachingOptions
Caching options.
class CibaOptions
Configures client initiated backchannel authentication
class CorsOptions
Options for CORS
class CryptoHelper
Crypto helper
class CspOptions
Options for Content Security Policy
class DeviceFlowOptions
Configures device flow
class DiagnosticOptions
Options that control the way that diagnostic data is logged.
class DiscoveryOptions
Options class to configure discovery endpoint
class DPoPOptions
Options for DPoP
class DynamicClientRegistrationDiscoveryOptions
class DynamicProviderOptions
Configures the dynamic external provider feature.
class EndpointsOptions
Configures which endpoints are enabled or disabled.
class EventsOptions
Configures events
class IdentityServerBuilder
IdentityServer helper class for DI configuration
class IdentityServerOptions
The IdentityServerOptions class is the top level container for all configuration settings of IdentityServer.
class InputLengthRestrictions
class KeyManagementOptions
Options to configure behavior of KeyManager.
class LoggingOptions
Options for configuring logging behavior
class MutualTlsOptions
Options for Mutual TLS features
enum NameType
Describes the string so we know what to search for in certificate store
class PostConfigureApplicationCookieTicketStore
Cookie configuration for the user session plumbing
class PreviewFeatureOptions
Provides configuration options for enabling and managing preview features in IdentityServer.
class PushedAuthorizationOptions
The Pushed Authorization Options.
enum RegistrationEndpointMode
class ServerSideSessionOptions
Configures the behavior for server-side sessions.
class SigningAlgorithmOptions
Class to configure signing algorithm.
class UserInteractionOptions
Options for aspects of the user interface.
class ValidationOptions
The ValidationOptions contains settings that affect some of the default validation behavior.

Duende.​IdentityServer.​Endpoints.​Results

class AuthorizeHttpWriter
Writes http responses for <see cref="T:Duende.IdentityServer.Endpoints.Results.AuthorizeResult" /> s.
class AuthorizeInteractionPageResult
Result for an interactive page
class AuthorizeResult
Models the result from the authorize endpoint
class BackchannelAuthenticationResult
Models the result of backchannel authentication
class BadRequestResult
The result of a bad request
class CheckSessionResult
The resukt of the check session endpoint
class ConsentPageResult
Result for consent page
class CreateAccountPageResult
Result for create account page
class CustomRedirectResult
Result for a custom redirect
class DeviceAuthorizationResult
The result of device authorization
class DiscoveryDocumentResult
Result for a discovery document
class EndpointResult<​T>
Provides the base implementation of <see cref="T:Duende.IdentityServer.Hosting.IEndpointResult" /> that invokes the corresponding <see cref="T:Duende.IdentityServer.Hosting.IHttpResponseWriter`1" /> to write the result as an http response.
class EndSessionCallbackResult
Models the result of end session callback
class EndSessionResult
Result for endsession
class IntrospectionResult
Result for introspection
class JsonWebKeysResult
Result for the jwks document
class LoginPageResult
Result for login page
class ProtectedResourceErrorResult
Models result of a protected resource
class PushedAuthorizationErrorResult
Represents an error result from the pushed authorization endpoint that can be written to the http response.
class PushedAuthorizationResult
Represents a successful result from the pushed authorization endpoint that can be written to the http response.
class StatusCodeResult
Result for a raw HTTP status code
class TokenErrorResult
Models a token error result
class TokenResult
Models a token result
class TokenRevocationErrorResult
Result for revocation error
class UserInfoResult
The result of userinfo

Duende.​IdentityServer.​Events

class ApiAuthenticationFailureEvent
Event for failed API authentication
class ApiAuthenticationSuccessEvent
Event for successful API authentication
class BackchannelAuthenticationFailureEvent
Event for failed backchannel authentication result
class BackchannelAuthenticationSuccessEvent
Event for successful backchannel authentication result
class ClientAuthenticationFailureEvent
Event for failed client authentication
class ClientAuthenticationSuccessEvent
Event for successful client authentication
class ConsentDeniedEvent
Event for denied consent.
class ConsentGrantedEvent
Event for granted consent.
class DefaultEventService
The default event service
class DeviceAuthorizationFailureEvent
Event for device authorization failure
class DeviceAuthorizationSuccessEvent
Event for device authorization failure
class Event
Models base class for events raised from IdentityServer.
class EventCategories
Categories for events
class EventIds
enum EventTypes
Indicates if the event is a success or fail event.
class GrantsRevokedEvent
Event for revoked grants.
class InvalidClientConfigurationEvent
Event for unhandled exceptions
class InvalidIdentityProviderConfiguration
Event for unhandled exceptions
class TokenIntrospectionFailureEvent
Event for failed token introspection
class TokenIntrospectionSuccessEvent
Event for successful token introspection
class TokenIssuedFailureEvent
Event for failed token issuance
class TokenIssuedSuccessEvent
Event for successful token issuance
class TokenRevokedSuccessEvent
Event for successful token revocation
class UnhandledExceptionEvent
Event for unhandled exceptions
class UserLoginFailureEvent
Event for failed user authentication
class UserLoginSuccessEvent
Event for successful user authentication
class UserLogoutSuccessEvent
Event for successful user logout

Duende.​IdentityServer.​Extensions

class AuthenticationPropertiesExtensions
Extensions for AuthenticationProperties
class AuthenticationTicketExtensions
Extension methods for AuthenticationTicket
class HttpContextExtensions
class HttpRequestExtensions
class HttpResponseExtensions
class IEnumerableExtensions
class IReadableStringCollectionExtensions
class KeyManagementExtensions
Extensions for Key Management
class PrincipalExtensions
Extension methods for <see cref="T:System.Security.Principal.IPrincipal" /> and <see cref="T:System.Security.Principal.IIdentity" /> .
class ServerUrlExtensions
Extension methods for IServerUrls
class TokenExtensions
Extensions for Token
class X509CertificateExtensions
Extensions methods for X509Certificate2

Duende.​IdentityServer.​Hosting

class BaseUrlMiddleware
class CorsMiddlewareExtensions
class Endpoint
class IdentityServerMiddleware
IdentityServer middleware
interface IEndpointHandler
Endpoint handler
interface IEndpointResult
An <see cref="T:Duende.IdentityServer.Hosting.IEndpointResult" /> is the object model that describes the results that will returned by one of the protocol endpoints provided by IdentityServer, and can be executed to produce an HTTP response.
interface IEndpointRouter
The endpoint router is responsible for mapping incoming http requests onto <see cref="T:Duende.IdentityServer.Hosting.IEndpointHandler" /> s, for the protocol endpoints that IdentityServer supports.
interface IHttpResponseWriter<​T>
Contract for a service that writes appropriate http responses for <see cref="T:Duende.IdentityServer.Hosting.IEndpointResult" /> objects.
class MutualTlsEndpointMiddleware
Middleware for re-writing the MTLS enabled endpoints to the standard protocol endpoints

Duende.​IdentityServer.​Hosting.​DynamicProviders

class CachingIdentityProviderStore<​T>
Caching decorator for IIdentityProviderStore
class ConfigureAuthenticationContext<​TAuthenticationOptions, TIdentityProvider>
Context for configuring an authentication handler from a dynamic identity provider.
class ConfigureAuthenticationOptions<​TAuthenticationOptions, TIdentityProvider>
Helper class for configuring authentication options from a dynamic identity provider
class DynamicAuthenticationScheme
Models a dynamic authentication scheme and it's corresponding IdentityProvider data.
class DynamicAuthenticationSchemeCache
Cache for DynamicAuthenticationScheme.
class NonCachingIdentityProviderStore<​T>
Decorator for IIdentityProviderStore that will purge the IOptionsMonitor so that the options are not cached.
class ValidatingIdentityProviderStore<​T>
Validating decorator for IIdentityProviderStore

Duende.​IdentityServer.​Hosting.​LocalApiAuthentication

class ClaimsTransformationContext
Context class for local API claims transformation
class LocalApiAuthenticationEvents
Events for local API authentication
class LocalApiAuthenticationHandler
Authentication handler for validating access token from the local IdentityServer
class LocalApiAuthenticationOptions
Options for local API authentication
enum LocalApiTokenMode
Models the type of tokens accepted for local API authentication

Duende.​IdentityServer.​Infrastructure

class DistributedCacheStateDataFormatter
State formatter using IDistributedCache
class RemovePropertyModifier<​T>

Duende.​IdentityServer.​Internal

class DefaultConcurrencyLock<​T>
Default implementation.
interface IConcurrencyLock<​T>
Interface to model locking.
class NopConcurrencyLock<​T>
Nop implementation.

Duende.​IdentityServer.​Licensing

class LicenseUsageSummary
Usage summary for the current IdentityServer instance intended for auditing purposes.

Duende.​IdentityServer.​Licensing.​V2.​Diagnostics

class DiagnosticContext

Duende.​IdentityServer.​Models

enum AuthorizationError
Enum to model interaction authorization errors.
class AuthorizationRequest
Represents contextual information about a authorization request.
class BackchannelUserLoginRequest
Models the information to initiate a user login request due to a CIBA request.
class ClientExtensions
Extension methods for client.
class ConsentRequest
Models the parameters to identify a request for consent.
class ConsentResponse
Models the user's response to the consent screen.
class DeviceFlowAuthorizationRequest
Represents contextual information about a device flow authorization request.
class DeviceFlowInteractionResult
Request object for device flow interaction
class ErrorMessage
Models the data for the error page.
class Grant
Models a grant the user has given.
class GrantTypes
class HashExtensions
Extension methods for hashing strings
class IdentityResources
Convenience class that defines standard identity resources.
class IsActiveContext
Context describing the is-active check
class JsonWebKey
class LogoutMessage
Models the validated singout context.
class LogoutNotificationContext
Provides the context necessary to construct a logout notification.
enum LogoutNotificationReason
Models the reason the user's session was ended.
class LogoutRequest
Models the request from a client to sign the user out.
class Message<​TModel>
Base class for data that needs to be written out as cookies.
class ParsedSecret
Represents a secret extracted from the HttpContext
class ProfileDataRequestContext
Class describing the profile data request
class ProfileDataRequestContextExtensions
Extensions for ProfileDataRequestContext
class RefreshTokenCreationRequest
Models the data to create a refresh token from a validated request.
class RefreshTokenUpdateRequest
Models the data to update a refresh token.
class ResourceExtensions
Extensions for Resource
class SecurityKeyInfo
Information about a security key
class TokenCreationRequest
Models the data to create a token from a validated request.
enum TokenRequestErrors
Token request errors
class UserSession
Results from querying user sessions from session management service.

Duende.​IdentityServer.​ResponseHandling

class AuthorizeInteractionResponseGenerator
Default logic for determining if user must login or consent when making requests to the authorization endpoint.
class AuthorizeResponse
class AuthorizeResponseGenerator
The authorize response generator
class BackchannelAuthenticationResponse
Models a backchannel authentication response
class BackchannelAuthenticationResponseGenerator
The backchannel authentication response generator
class DeviceAuthorizationResponse
class DeviceAuthorizationResponseGenerator
The device authorization response generator
class DiscoveryResponseGenerator
Default implementation of the discovery endpoint response generator
interface IAuthorizeInteractionResponseGenerator
Interface for determining if user must login or consent when making requests to the authorization endpoint.
interface IAuthorizeResponseGenerator
Interface for the authorize response generator
interface IBackchannelAuthenticationResponseGenerator
Interface the backchannel authentication response generator
interface IDeviceAuthorizationResponseGenerator
Interface for the device authorization response generator
interface IDiscoveryResponseGenerator
Interface for discovery endpoint response generator
interface IIntrospectionResponseGenerator
Interface for introspection response generator
class InteractionResponse
Indicates interaction outcome for user on authorization endpoint.
enum InteractionResponseType
Models the types of interaction results from the IAuthorizeInteractionResponseGenerator
class IntrospectionResponseGenerator
The introspection response generator
interface IPushedAuthorizationResponseGenerator
Service that generates response models for the pushed authorization endpoint. This service encapsulates the behavior that is needed to create a response model from a validated request.
interface ITokenResponseGenerator
Interface the token response generator
interface ITokenRevocationResponseGenerator
Interface for the userinfo response generator
interface IUserInfoResponseGenerator
Interface for the userinfo response generator
class PushedAuthorizationFailure
Represents failure from the pushed authorization endpoint.
class PushedAuthorizationResponse
Base class for responses from the pushed authorization endpoint.
class PushedAuthorizationResponseGenerator
class PushedAuthorizationSuccess
Represents success from the pushed authorization endpoint.
class TokenErrorResponse
Models a token error response
class TokenResponse
Models a token response
class TokenResponseGenerator
The default token response generator
class TokenRevocationResponse
Models a token revocation response
class TokenRevocationResponseGenerator
Default revocation response generator
class UserInfoResponseGenerator
The userinfo response generator

Duende.​IdentityServer.​Services

class BackChannelLogoutRequest
Information necessary to make a back-channel logout request to a client.
class CompleteBackchannelLoginRequest
Models the data needed for a user to complete a backchannel authentication request.
class DefaultBackchannelAuthenticationInteractionService
Default implementation of IBackchannelAuthenticationInteractionService.
class DefaultBackChannelLogoutHttpClient
Models making HTTP requests for back-channel logout notification.
class DefaultBackChannelLogoutService
Default back-channel logout notification implementation.
class DefaultCache<​T>
IMemoryCache-based implementation of the cache
class DefaultClaimsService
Default claims provider implementation
class DefaultConsentService
Default consent service
class DefaultCorsPolicyService
Default CORS policy service.
class DefaultEventSink
Default implementation of the event service. Write events raised to the log.
class DefaultHandleGenerationService
Default handle generation service
class DefaultIssuerNameService
Abstracts issuer name access
class DefaultJwtRequestUriHttpClient
Default JwtRequest client
class DefaultKeyMaterialService
The default key material service
class DefaultPersistedGrantService
Default persisted grant service
class DefaultProfileService
Default profile service implementation. This implementation sources all claims from the current subject (e.g. the cookie).
class DefaultRefreshTokenService
Default refresh token service
class DefaultReplayCache
Default implementation of the replay cache using IDistributedCache
class DefaultServerUrls
Implements IServerUrls
class DefaultSessionCoordinationService
Default session coordination service
class DefaultSessionManagementService
Default session management service
class DefaultTokenCreationService
Default token creation service
class DefaultTokenService
Default token service
class DefaultUserCodeService
Default user code service implementation.
class DefaultUserSession
Cookie-based session implementation
class DeserializedPushedAuthorizationRequest
A pushed authorization request that is not serialized.
class DiagnosticDataService
class DistributedBackchannelAuthenticationThrottlingService
Implementation of IBackchannelAuthenticationThrottlingService that uses the IDistributedCache.
class DistributedDeviceFlowThrottlingService
The default device flow throttling service using IDistributedCache.
interface IBackchannelAuthenticationInteractionService
Provide services be used by the user interface to communicate with IdentityServer for backchannel authentication requests.
interface IBackchannelAuthenticationThrottlingService
The backchannel authentication throttling service.
interface IBackchannelAuthenticationUserNotificationService
Interface for sending a user a login request from a backchannel authentication request.
interface IBackChannelLogoutHttpClient
Models making HTTP requests for back-channel logout notification.
interface IBackChannelLogoutService
The service responsible for performing back-channel logout notification.
interface ICache<​T>
Abstract interface to model data caching
interface IClaimsService
The claims service is responsible for determining which claims to include in tokens
interface IConsentService
Service to retrieve and update consent.
interface IDeviceFlowCodeService
Wrapper service for IDeviceFlowStore.
interface IDeviceFlowInteractionService
Provide services be used by the user interface to communicate with IdentityServer.
interface IDeviceFlowThrottlingService
The device flow throttling service.
interface IEventService
Interface for the event service
interface IEventSink
Models persistence of events
interface IHandleGenerationService
Interface for the handle generation service
interface IIdentityServerInteractionService
Provide services be used by the user interface to communicate with IdentityServer.
interface IIssuerNameService
Abstract access to the current issuer name
interface IJwtRequestUriHttpClient
Models making HTTP requests for JWTs from the authorize endpoint.
interface IKeyMaterialService
Interface for the key material service
interface ILogoutNotificationService
Provides features for OIDC signout notifications.
class InMemoryCorsPolicyService
An ICorsPolicyService for use with clients configured with AddInMemoryClients. This service will allow any origin included in any client's AllowedCorsOrigins.
interface IPersistedGrantService
Implements persisted grant logic
interface IProfileService
This interface allows IdentityServer to connect to your user and profile store.
interface IPushedAuthorizationSerializer
Contract for a service that can serialize and deserialize pushed authorization requests.
interface IPushedAuthorizationService
Contract for a service that performs high-level operations on pushed authorization requests.
interface IRefreshTokenService
Implements refresh token creation and validation
interface IReplayCache
Interface for replay cache implementations
interface IReturnUrlParser
Interface for the return URL parser
interface IServerUrls
Configures the per-request URLs and paths into the current server
interface ISessionCoordinationService
Service responsible for logic around coordinating client and server session lifetimes.
interface ISessionManagementService
Session management service
interface ITokenCreationService
Logic for creating security tokens
interface ITokenService
Logic for creating security tokens
interface IUiLocalesService
interface IUserCodeGenerator
Implements device flow user code generation
interface IUserCodeService
Implements user code generation
interface IUserSession
Models a user's authentication session
class LogoutNotificationService
Default implementation of logout notification service.
class NopBackchannelAuthenticationUserNotificationService
Nop implementation of IUserLoginService.
class NumericUserCodeGenerator
User code generator using 9 digit number
class PushedAuthorizationSerializer
Default implementation of <see cref="T:Duende.IdentityServer.Services.IPushedAuthorizationSerializer" /> .
class PushedAuthorizationService
class RemoveSessionsContext
Models the information to remove a user's session data.
class ReturnUrlParser
Parses a return URL using all registered URL parsers
class SessionValidationRequest
Models request to validation a session from a client.
enum SessionValidationType
Represent the type of session validation request

Duende.​IdentityServer.​Services.​Default

class DefaultDeviceFlowCodeService
Default wrapper service for IDeviceFlowStore, handling key hashing
class DefaultUiLocalesService

Duende.​IdentityServer.​Services.​KeyManagement

class AutomaticKeyManagerKeyStore
Implementation of IValidationKeysStore and ISigningCredentialStore based on KeyManager.
class ClientConfigurationValidator
Client configuration validator that ensures access token lifetimes are compatible with the key management options.
class DataProtectionKeyProtector
Implementation of IKeyProtector based on ASP.NET Core's data protection feature.
class EcKeyContainer
Container class for ECDsaSecurityKey.
class FileSystemKeyStore
Implementation of ISigningKeyStore based on file system.
interface IAutomaticKeyManagerKeyStore
Store abstraction for automatic key management.
interface IKeyManager
Interface to model loading the keys.
interface ISigningKeyProtector
Interface to model protecting/unprotecting RsaKeyContainer.
interface ISigningKeyStoreCache
Interface to model caching keys loaded from key store.
class KeyContainer
Container class for key.
class KeyManager
Implementation of IKeyManager that creates, stores, and rotates signing keys.
class RsaKeyContainer
Container class for RsaSecurityKey.
class X509KeyContainer
Container class for X509 keys.

Duende.​IdentityServer.​Stores

class CachingClientStore<​T>
Cache decorator for IClientStore
class CachingCorsPolicyService<​T>
Caching decorator for ICorsPolicyService
class CachingResourceStore<​T>
Caching decorator for IResourceStore
class DefaultAuthorizationCodeStore
Default authorization code store.
class DefaultBackChannelAuthenticationRequestStore
Default authorization code store.
class DefaultGrantStore<​T>
Base class for persisting grants using the IPersistedGrantStore.
class DefaultReferenceTokenStore
Default reference token store.
class DefaultRefreshTokenStore
Default refresh token store.
class DefaultUserConsentStore
Default user consent store.
interface IAuthorizationParametersMessageStore
Interface for authorization request messages that are sent from the authorization endpoint to the login and consent UI.
class IClientStoreExtensions
Extension for IClientStore
interface IConsentMessageStore
Interface for consent messages that are sent from the consent UI to the authorization endpoint.
interface IMessageStore<​TModel>
Interface for a message store
class InMemoryClientStore
In-memory client store
class InMemoryDeviceFlowStore
In-memory device flow store
class InMemoryPersistedGrantStore
In-memory persisted grant store
class InMemoryPushedAuthorizationRequestStore
In-memory implementation of the pushed authorization request store
class InMemoryResourcesStore
In-memory resource store
class InMemoryServerSideSessionStore
In-memory user session store
class InMemorySigningCredentialsStore
Default signing credentials store
class InMemoryValidationKeysStore
The default validation key store
class IResourceStoreExtensions
Extensions for IResourceStore
interface IServerSideTicketStore
Custom type for ITicketStore
interface ISigningCredentialStore
Interface for a signing credential store
interface IValidationKeysStore
Interface for the validation key store
class ProtectedDataMessageStore<​TModel>
IMessageStore implementation that uses data protection to protect message.
class ServerSideTicketStore
IServerSideSessionService backed by server side session store
class ValidatingClientStore<​T>
Client store decorator for running runtime configuration validation checks

Duende.​IdentityServer.​Stores.​Default

class DistributedCacheAuthorizationParametersMessageStore
Implementation of IAuthorizationParametersMessageStore that uses the IDistributedCache.

Duende.​IdentityServer.​Test

class TestUser
In-memory user object for testing. Not intended for modeling users in production.
class TestUserProfileService
Profile service for test users
class TestUserResourceOwnerPasswordValidator
Resource owner password validator for test users
class TestUserStore
Store for test users

Duende.​IdentityServer.​Validation

class ApiSecretValidationResult
Validation result for API validation
class ApiSecretValidator
Validates API secrets using the registered secret validators and parsers
enum AuthorizeRequestType
Indicates the context in which authorization validation is occurring (is this the authorize endpoint with or without PAR or the PAR endpoint itself?)
class AuthorizeRequestValidationResult
Validation result for authorize requests
class BackchannelAuthenticationRequestIdValidationContext
Context for backchannel authentication request id validation.
class BackchannelAuthenticationRequestValidationResult
Validation result for backchannel authentication requests
class BackchannelAuthenticationUserValidationResult
Represents the result of a backchannel authentication request.
class BackchannelAuthenticationUserValidatorContext
Context information for validating a user during backchannel authentication request.
class BasicAuthenticationSecretParser
Parses a Basic Authentication header
enum BearerTokenUsageType
class BearerTokenUsageValidationResult
Models usage of a bearer token
class ClientConfigurationValidationContext
Context for client configuration validation.
class ClientSecretValidationResult
Validation result for client validation
class ClientSecretValidator
Validates a client secret using the registered secret validators and parsers
class CustomAuthorizeRequestValidationContext
Context for custom authorize request validation.
class CustomBackchannelAuthenticationRequestValidationContext
The validation context for a custom CIBA validator.
class CustomTokenRequestValidationContext
Context class for custom token request validation
class DefaultClientConfigurationValidator
Default client configuration validator
class DefaultCustomBackchannelAuthenticationValidator
Default implementation of the CIBA validator extensibility point. This validator deliberately does nothing.
class DefaultCustomTokenValidator
Default custom token validator
class DefaultDPoPProofValidator
Default implementation of IDPoPProofValidator
class DefaultIdentityProviderConfigurationValidator
Default identity provider configuration validator
class DefaultIssuerPathValidator
class DefaultResourceValidator
Default implementation of IResourceValidator.
class DefaultScopeParser
Default implementation of IScopeParser.
class DeviceAuthorizationRequestValidationResult
Validation result for device authorization requests
class DeviceCodeValidationContext
Validation result for device code validation request.
class DPoPProofValidatonContext
Models the context for validaing DPoP proof tokens.
class DPoPProofValidatonResult
Models the result of DPoP proof validation.
class EndSessionCallbackValidationResult
Validation result for end session callback requests.
class EndSessionRequestValidator
Validates requests to the end session endpoint.
class EndSessionValidationResult
Validation result for end session requests
class ExtensionGrantValidationContext
Class describing the extension grant validation context
class ExtensionGrantValidator
Validates an extension grant request using the registered validators
class GrantValidationResult
Models the result of custom grant validation.
class HashedSharedSecretValidator
Validates a shared secret stored in SHA256 or SHA512
interface IApiSecretValidator
Validator for handling API client authentication.
interface IAuthorizeRequestValidator
Authorize endpoint request validator.
interface IBackchannelAuthenticationRequestIdValidator
The backchannel authentication request id validator
interface IBackchannelAuthenticationRequestValidator
Interface for the backchannel authentication request validator
interface IBackchannelAuthenticationUserValidator
Interface for the backchannel authentication user validation
interface IClientConfigurationValidator
Validator for handling client authentication
interface IClientSecretValidator
Validator for handling client authentication
interface ICustomAuthorizeRequestValidator
Allows inserting custom validation logic into authorize and token requests
interface ICustomBackchannelAuthenticationValidator
Extensibility point for CIBA authentication request validation.
interface ICustomTokenRequestValidator
Allows inserting custom validation logic into token requests
interface ICustomTokenValidator
Allows inserting custom token validation logic
class IdentityProviderConfigurationValidationContext
Context for identity provider configuration validation.
class IdentityProviderConfigurationValidationContext<​T>
Context for identity provider configuration validation.
interface IDeviceAuthorizationRequestValidator
Device authorization endpoint request validator.
interface IDeviceCodeValidator
The device code validator
interface IDPoPProofValidator
Validator for handling DPoP proofs.
interface IEndSessionRequestValidator
Validates end session requests.
interface IExtensionGrantValidator
Handles validation of token requests using custom grant types
interface IIdentityProviderConfigurationValidator
Validator for handling identity provider configuration
interface IIntrospectionRequestValidator
Interface for the introspection request validator
interface IIssuerPathValidator
interface IJwtRequestValidator
Interface for request object validator
class IntrospectionRequestValidationContext
Context for validating an introspection request.
enum IntrospectionRequestValidationFailureReason
Failure reasons for introspection request
class IntrospectionRequestValidationResult
Validation result for introspection request
interface IPushedAuthorizationRequestValidator
Validation service for pushed authorization requests. Note that, in addition to validation performed specially for pushed authorization requests, the pushed parameters should be validated in the same way as an authorization request sent to the authorization endpoint. Typical implementations of this service will delegate to the <see cref="T:Duende.IdentityServer.Validation.IAuthorizeRequestValidator" /> for this purpose.
interface IRedirectUriValidator
Models the logic when validating redirect and post logout redirect URIs.
interface IResourceOwnerPasswordValidator
Handles validation of resource owner password credentials
interface IResourceValidator
Validates requested resources (scopes and resource indicators)
interface IScopeParser
Allows parsing raw scopes values into structured scope values.
interface ISecretParser
A service for parsing secrets found on the request
interface ISecretsListParser
Parser for finding the best secret in an Enumerable List
interface ISecretsListValidator
Validator for an Enumerable List of Secrets
interface ISecretValidator
Service for validating a received secret against a stored secret
interface ITokenRequestValidator
Interface for the token request validator
interface ITokenRevocationRequestValidator
Interface for the token revocation request validator
interface ITokenValidator
Interface for the token validator
interface IUserInfoRequestValidator
Validator for userinfo requests
class JwtBearerClientAssertionSecretParser
Parses a POST body for a JWT bearer client assertion
class JwtRequestValidationContext
Context for validating a JWT sent as a request parameter.
class JwtRequestValidationResult
Models the result of JWT request validation.
class JwtRequestValidator
Validates JWT authorization request objects
class MutualTlsSecretParser
Parses secret according to MTLS spec
class NopBackchannelAuthenticationUserValidator
Nop implementation of IBackchannelAuthenticationUserValidator.
class NopClientConfigurationValidator
No-op client configuration validator (for backwards-compatibility).
class NotSupportedResourceOwnerPasswordValidator
Default resource owner password validator (no implementation == not supported)
class ParsedScopesResult
Represents the result of scope parsing.
class ParsedScopeValidationError
Models an error parsing a scope.
class ParsedScopeValue
Models a parsed scope value.
class PlainTextSharedSecretValidator
Validates a secret stored in plain text
class PostBodySecretParser
Parses a POST body for secrets
class PrivateKeyJwtSecretValidator
Validates a secret based on RS256 signed JWT token
class ProofKeyThumbprint
Models the thumbprint of a proof key
class PushedAuthorizationRequestValidationContext
Context needed to validate a pushed authorization request.
class PushedAuthorizationValidationResult
Represents the results of validating a pushed authorization request.
class RedirectUriValidationContext
Models the context for validating a client's redirect URI
class ResourceOwnerPasswordValidationContext
Class describing the resource owner password validation context
class ResourceValidationContext
Class describing the resource validation context
class ResourceValidationRequest
Models the request to validate scopes and resource indicators for a client.
class ResourceValidationResult
Result of validation of requested scopes and resource indicators.
class ResponseTypeEqualityComparer
Compares resource_type strings, where the order of space-delimited values is insignificant.
class SecretParser
Uses the registered secret parsers to parse a secret on the current request
class SecretValidationResult
Validation result for secrets
class SecretValidator
Validates secrets using the registered validators
class StrictRedirectUriValidator
Default implementation of redirect URI validator. Validates the URIs against the client's configured URIs.
class StrictRedirectUriValidatorAppAuth
Implementation of strict redirect URI validator that allows a random port if 127.0.0.1 is used.
class TokenRequestValidationContext
Class describing the token endpoint request validation context
class TokenRequestValidationResult
Validation result for token requests
class TokenRevocationRequestValidationResult
Models the validation result of access tokens and id tokens.
class TokenValidationResult
Models the validation result of access tokens and id tokens.
class UserInfoRequestValidationResult
Validation result for userinfo requests
class ValidatedAuthorizeRequest
Models a validated request to the authorize endpoint.
class ValidatedAuthorizeRequestExtensions
class ValidatedBackchannelAuthenticationRequest
Models a validated request to the backchannel authentication endpoint.
class ValidatedDeviceAuthorizationRequest
Models a validated request to the device authorization endpoint.
class ValidatedEndSessionRequest
Represents a validated end session (logout) request
class ValidatedPushedAuthorizationRequest
A validated pushed authorization request
class ValidatedRequest
Base class for a validated authorize or token request
class ValidatedTokenRequest
Models a validated request to the token endpoint.
class ValidationResult
Minimal validation result class (base-class for more complex validation results)
class X509NameSecretValidator
Validator for an X.509 certificate based client secret using the common name
class X509ThumbprintSecretValidator
Validator for an X.509 certificate based client secret using the thumbprint

Microsoft.​AspNetCore.​Builder

class IdentityServerApplicationBuilderExtensions
Pipeline extension methods for adding IdentityServer
class IdentityServerMiddlewareOptions
Options for the IdentityServer middleware

Microsoft.​AspNetCore.​Http

class AuthenticationManagerExtensions
Extension methods for signin/out using the IdentityServer authentication scheme.

Microsoft.​Extensions.​DependencyInjection

class IdentityServerBuilderDynamicSchemesExtensions
Add extension methods for configuring generic dynamic providers.
class IdentityServerBuilderExtensions
Extension methods for the IdentityServer builder
class IdentityServerBuilderExtensionsAdditional
Builder extension methods for registering additional services
class IdentityServerBuilderExtensionsCore
Builder extension methods for registering core services
class IdentityServerBuilderExtensionsCrypto
Builder extension methods for registering crypto services
class IdentityServerBuilderExtensionsInMemory
Builder extension methods for registering in-memory services
class IdentityServerBuilderOidcExtensions
Add extension methods for configuring OIDC dynamic providers.
class IdentityServerServiceCollectionExtensions
DI extension methods for adding IdentityServer
interface IIdentityServerBuilder
IdentityServer builder Interface
class LocalApiAuthenticationExtensions
Extensions for registering the local access token authentication handler
class ServerSideSessionCleanupHost
Helper to cleanup expired server side sessions.
class SessionManagementServiceCollectionExtensions
Extension methods for adding session management
class TestBackchannelLoginUserValidator
Implementation of IBackchannelAuthenticationUserValidator using the test user store.

Dependencies