Early Preview
This is currently very much a preview. Please feel free to try things out,
but don't be upset if anything is not yet working. Feedback is welcome over on our
GitHub Dicussions page.
interface Duende.IdentityServer.Services.IPushedAuthorizationService
Assembly: Duende.IdentityServer
Contract for a service that performs high-level operations on pushed authorization requests.
Methods
StoreAsync(DeserializedPushedAuthorizationRequest pushedAuthorizationRequest,
System.Threading.CancellationToken ct)
Serializes, data protects, and stores the pushed authorization request.
pushedAuthorizationRequest
The pushed authorization
request without serialization or data protection applied
ct
The cancellation token.
ConsumeAsync(string referenceValue,
System.Threading.CancellationToken ct)
Consumes the pushed authorization request, indicating that it should not
be used again. Repeated use could indicate some form of replay attack,
but also could indicate that an end user refreshed their browser or
otherwise retried a request that consumed the pushed authorization
request.
referenceValue
The reference value of the pushed
authorization request. The reference value is the identifier within the
request_uri parameter.
ct
The cancellation token.
GetPushedAuthorizationRequestAsync(string referenceValue,
System.Threading.CancellationToken ct)
Gets the raw pushed authorization parameters.
Returns The deserialized pushed authorization request, or null if the
request does not exist or was previously consumed.
referenceValue
The reference value of the pushed
authorization request. The reference value is the identifier within the
request_uri parameter.
ct
The cancellation token.