Kévin Chalet
3 years ago
54 changed files with 2539 additions and 1134 deletions
@ -0,0 +1,15 @@ |
|||
/* |
|||
* Licensed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
|
|||
* See https://github.com/openiddict/openiddict-core for more information concerning
|
|||
* the license and the contributors participating to this project. |
|||
*/ |
|||
|
|||
namespace OpenIddict.Client.WebIntegration; |
|||
|
|||
/// <summary>
|
|||
/// Provides various settings needed to configure the OpenIddict client Web providers.
|
|||
/// </summary>
|
|||
public sealed partial class OpenIddictClientWebIntegrationSettings |
|||
{ |
|||
// Note: provider settings are automatically generated by the source generator.
|
|||
} |
|||
@ -0,0 +1,760 @@ |
|||
/* |
|||
* Licensed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
|
|||
* See https://github.com/openiddict/openiddict-core for more information concerning
|
|||
* the license and the contributors participating to this project. |
|||
*/ |
|||
|
|||
using System.ComponentModel; |
|||
using System.Security.Claims; |
|||
|
|||
namespace OpenIddict.Client; |
|||
|
|||
/// <summary>
|
|||
/// Exposes various records used to represent client requests and responses.
|
|||
/// </summary>
|
|||
public static class OpenIddictClientModels |
|||
{ |
|||
/// <summary>
|
|||
/// Represents an interactive authentication request.
|
|||
/// </summary>
|
|||
public sealed record class InteractiveAuthenticationRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the token request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalTokenRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the nonce that was returned during the challenge operation.
|
|||
/// </summary>
|
|||
public required string Nonce { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents an interactive authentication result.
|
|||
/// </summary>
|
|||
public sealed record class InteractiveAuthenticationResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the authorization code, if available.
|
|||
/// </summary>
|
|||
public required string? AuthorizationCode { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the authorization response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse AuthorizationResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the backchannel access token, if available.
|
|||
/// </summary>
|
|||
public required string? BackchannelAccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the backchannel identity token, if available.
|
|||
/// </summary>
|
|||
public required string? BackchannelIdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the backchannel identity token, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? BackchannelIdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the frontchannel access token, if available.
|
|||
/// </summary>
|
|||
public required string? FrontchannelAccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the frontchannel identity token, if available.
|
|||
/// </summary>
|
|||
public required string? FrontchannelIdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the frontchannel identity token, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? FrontchannelIdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets a merged principal containing all the claims
|
|||
/// extracted from the identity token and userinfo token principals.
|
|||
/// </summary>
|
|||
public required ClaimsPrincipal Principal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token, if available.
|
|||
/// </summary>
|
|||
public required string? RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the state token, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? StateTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the token response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse TokenResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the userinfo token or response, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? UserinfoTokenPrincipal { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents an interactive challenge request.
|
|||
/// </summary>
|
|||
public sealed record class InteractiveChallengeRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the authorization request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalAuthorizationRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents an interactive challenge result.
|
|||
/// </summary>
|
|||
public sealed record class InteractiveChallengeResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the nonce that is used as a unique identifier for the challenge operation.
|
|||
/// </summary>
|
|||
public required string Nonce { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a client credentials authentication request.
|
|||
/// </summary>
|
|||
public sealed record class ClientCredentialsAuthenticationRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the token request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalTokenRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a client credentials authentication result.
|
|||
/// </summary>
|
|||
public sealed record class ClientCredentialsAuthenticationResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the access token.
|
|||
/// </summary>
|
|||
public required string AccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the identity token, if available.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: this property is generally not set, unless when dealing with an identity
|
|||
/// provider that returns an identity token for the client credentials grant.
|
|||
/// </remarks>
|
|||
public required string? IdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the identity token, if available.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: this property is generally not set, unless when dealing with an identity
|
|||
/// provider that returns an identity token for the client credentials grant.
|
|||
/// </remarks>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? IdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets a merged principal containing all the claims
|
|||
/// extracted from the identity token and userinfo token principals.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: in most cases, an empty principal will be returned, unless the authorization server
|
|||
/// supports returning a non-standard identity token for the client credentials grant or
|
|||
/// allows sending userinfo requests with an access token representing a client application.
|
|||
/// </remarks>
|
|||
public required ClaimsPrincipal Principal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token, if available.
|
|||
/// </summary>
|
|||
public required string? RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the token response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse TokenResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the userinfo token, if available.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: this property is generally not set, unless when dealing with non-standard providers.
|
|||
/// </remarks>
|
|||
public required string? UserinfoToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the userinfo token or response, if available.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: this property is generally not set, unless when dealing with non-standard providers.
|
|||
/// </remarks>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? UserinfoTokenPrincipal { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a device authentication request.
|
|||
/// </summary>
|
|||
public sealed record class DeviceAuthenticationRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the token request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalTokenRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the device code that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public required string DeviceCode { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the maximum duration during which token requests will be sent
|
|||
/// (typically, the same value as the "expires_in" parameter returned by the
|
|||
/// authorization server during the challenge phase or a lower value).
|
|||
/// </summary>
|
|||
public required TimeSpan Timeout { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the interval at which token requests will be sent (typically, the same
|
|||
/// value as the one returned by the authorization server during the challenge phase).
|
|||
/// </summary>
|
|||
public required TimeSpan Interval { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a device authentication result.
|
|||
/// </summary>
|
|||
public sealed record class DeviceAuthenticationResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the access token.
|
|||
/// </summary>
|
|||
public required string AccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the identity token, if available.
|
|||
/// </summary>
|
|||
public required string? IdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the identity token, if available.
|
|||
/// </summary>
|
|||
///
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? IdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets a merged principal containing all the claims
|
|||
/// extracted from the identity token and userinfo token principals.
|
|||
/// </summary>
|
|||
public required ClaimsPrincipal Principal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token, if available.
|
|||
/// </summary>
|
|||
public required string? RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the token response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse TokenResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the userinfo token, if available.
|
|||
/// </summary>
|
|||
public required string? UserinfoToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the userinfo token or response, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? UserinfoTokenPrincipal { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a device challenge request.
|
|||
/// </summary>
|
|||
public sealed record class DeviceChallengeRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the device authorization request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalDeviceAuthorizationRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a device challenge result.
|
|||
/// </summary>
|
|||
public sealed record class DeviceChallengeResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the device authorization response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse DeviceAuthorizationResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the device code.
|
|||
/// </summary>
|
|||
public required string DeviceCode { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the remaining lifetime of the device and user codes.
|
|||
/// </summary>
|
|||
public required TimeSpan ExpiresIn { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the interval at which token requests should be sent.
|
|||
/// </summary>
|
|||
public required TimeSpan Interval { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the user code.
|
|||
/// </summary>
|
|||
public required string UserCode { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the verification URI.
|
|||
/// </summary>
|
|||
public required Uri VerificationUri { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the complete verification URI, if available.
|
|||
/// </summary>
|
|||
public Uri? VerificationUriComplete { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a resource owner password credentials authentication request.
|
|||
/// </summary>
|
|||
public sealed record class PasswordAuthenticationRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the token request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalTokenRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the password that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public required string Password { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the username that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public required string Username { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a resource owner password credentials authentication result.
|
|||
/// </summary>
|
|||
public sealed record class PasswordAuthenticationResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the access token.
|
|||
/// </summary>
|
|||
public required string AccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the identity token, if available.
|
|||
/// </summary>
|
|||
public required string? IdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the identity token, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? IdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets a merged principal containing all the claims
|
|||
/// extracted from the identity token and userinfo token principals.
|
|||
/// </summary>
|
|||
public required ClaimsPrincipal Principal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token, if available.
|
|||
/// </summary>
|
|||
public required string? RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the token response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse TokenResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the userinfo token, if available.
|
|||
/// </summary>
|
|||
public required string? UserinfoToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the userinfo token or response, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? UserinfoTokenPrincipal { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a refresh token authentication request.
|
|||
/// </summary>
|
|||
public sealed record class RefreshTokenAuthenticationRequest |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the parameters that will be added to the token request.
|
|||
/// </summary>
|
|||
public Dictionary<string, OpenIddictParameter>? AdditionalTokenRequestParameters { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the cancellation token that will be
|
|||
/// used to determine if the operation was aborted.
|
|||
/// </summary>
|
|||
public CancellationToken CancellationToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that will be added to the context.
|
|||
/// </summary>
|
|||
public Dictionary<string, string?>? Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the provider name used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations use the same provider name.
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public string? ProviderName { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the unique identifier of the client registration that will be used.
|
|||
/// </summary>
|
|||
public string? RegistrationId { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets the scopes that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public List<string>? Scopes { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token that will be sent to the authorization server.
|
|||
/// </summary>
|
|||
public required string RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the issuer used to resolve the client registration.
|
|||
/// </summary>
|
|||
/// <remarks>
|
|||
/// Note: if multiple client registrations point to the same issuer,
|
|||
/// the <see cref="RegistrationId"/> property must be explicitly set.
|
|||
/// </remarks>
|
|||
public Uri? Issuer { get; init; } |
|||
} |
|||
|
|||
/// <summary>
|
|||
/// Represents a refresh token authentication result.
|
|||
/// </summary>
|
|||
public sealed record class RefreshTokenAuthenticationResult |
|||
{ |
|||
/// <summary>
|
|||
/// Gets or sets the access token.
|
|||
/// </summary>
|
|||
public required string AccessToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the identity token, if available.
|
|||
/// </summary>
|
|||
public required string? IdentityToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the identity token, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? IdentityTokenPrincipal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets a merged principal containing all the claims
|
|||
/// extracted from the identity token and userinfo token principals.
|
|||
/// </summary>
|
|||
public required ClaimsPrincipal Principal { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the application-specific properties that were present in the context.
|
|||
/// </summary>
|
|||
public required Dictionary<string, string?> Properties { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the refresh token, if available.
|
|||
/// </summary>
|
|||
public required string? RefreshToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the token response.
|
|||
/// </summary>
|
|||
public required OpenIddictResponse TokenResponse { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the userinfo token, if available.
|
|||
/// </summary>
|
|||
public required string? UserinfoToken { get; init; } |
|||
|
|||
/// <summary>
|
|||
/// Gets or sets the principal extracted from the userinfo token or response, if available.
|
|||
/// </summary>
|
|||
[EditorBrowsable(EditorBrowsableState.Advanced)] |
|||
public required ClaimsPrincipal? UserinfoTokenPrincipal { get; init; } |
|||
} |
|||
} |
|||
File diff suppressed because it is too large
Loading…
Reference in new issue