openiddict-core

2104 Commits

2 Branches

79 Tags

29 MiB

Tree: aa93d7111e

Commit Graph

Author	SHA1	Message	Date
Thor Arne Johansen	aa93d7111e	Fix CIMD token exchange by moving fetch handler to ProcessAuthenticationContext The CIMD metadata document fetch was running in the outer ValidateAuthorizationRequestContext pipeline, which only covers the authorize endpoint. During token exchange, ValidateClientType runs inside ProcessAuthenticationContext (before the outer pipeline handler) and calls FindByClientIdAsync — which returns null because the CIMD context was never populated for that request. Move FetchClientIdMetadataDocument to target ProcessAuthenticationContext with order between ValidateClientId and ValidateClientType. This ensures the CIMD document is fetched for all endpoint types (authorize, token, etc.) before the client type validation occurs.	1 week ago

Author

SHA1

Message

Date

Thor Arne Johansen

aa93d7111e

Fix CIMD token exchange by moving fetch handler to ProcessAuthenticationContext

The CIMD metadata document fetch was running in the outer
ValidateAuthorizationRequestContext pipeline, which only covers the
authorize endpoint. During token exchange, ValidateClientType runs
inside ProcessAuthenticationContext (before the outer pipeline handler)
and calls FindByClientIdAsync — which returns null because the CIMD
context was never populated for that request.

Move FetchClientIdMetadataDocument to target ProcessAuthenticationContext
with order between ValidateClientId and ValidateClientType. This ensures
the CIMD document is fetched for all endpoint types (authorize, token,
etc.) before the client type validation occurs.

1 week ago

1 Commits (aa93d7111e9b03ec603254146ff4202f49d90780)