HttpRequestHeaders Class
Abblix.Oidc.Server
Abblix.Oidc.Server.Common.Constants
HttpRequestHeaders Class
This class defines HTTP header names commonly used in HTTP requests.
public static class HttpRequestHeaders
Inheritance System.Object → HttpRequestHeaders
Fields
HttpRequestHeaders.Authorization Field
The "Authorization" header is used in HTTP requests to include authentication credentials. It is crucial for securing API endpoints and providing proof of client identity or permissions.
public const string Authorization = "Authorization";
Field Value
HttpRequestHeaders.DPoP Field
The "DPoP" request header carries the proof JWT bound to the current request method+URI per RFC 9449 §4.1. Present on token, userinfo, introspection, and revocation requests when the client demonstrates proof-of-possession of the access-token-binding key.
public const string DPoP = "DPoP";
Field Value
HttpRequestHeaders.DPoPNonce Field
The "DPoP-Nonce" response header carries the fresh nonce on a use_dpop_nonce
challenge response per RFC 9449 §8 / §9. Although a response header by direction, it
lives alongside the request-header constants here to keep all DPoP wire-form names in
one place; consumers are response formatters writing it onto outbound responses.
public const string DPoPNonce = "DPoP-Nonce";