Skip to main content

UserIdentityValidator Class

Abblix.Oidc.Server

Abblix.Oidc.Server.Endpoints.BackChannelAuthentication.Validation

UserIdentityValidator Class

Validates the user's identity in a backchannel authentication request, ensuring that valid identity hints (e.g., login hints, tokens) are provided and correctly processed.

public class UserIdentityValidator : Abblix.Oidc.Server.Endpoints.BackChannelAuthentication.Validation.IBackChannelAuthenticationContextValidator

Inheritance System.Object → UserIdentityValidator

Implements IBackChannelAuthenticationContextValidator

Constructors

UserIdentityValidator(IAuthServiceJwtValidator, IClientJwtValidator) Constructor

Validates the user's identity in a backchannel authentication request, ensuring that valid identity hints (e.g., login hints, tokens) are provided and correctly processed.

public UserIdentityValidator(Abblix.Oidc.Server.Features.Tokens.Validation.IAuthServiceJwtValidator idTokenValidator, Abblix.Oidc.Server.Features.Tokens.Validation.IClientJwtValidator clientJwtValidator);

Parameters

idTokenValidator IAuthServiceJwtValidator

Validator for ID tokens issued by the authorization server.

clientJwtValidator IClientJwtValidator

Validator for JWTs issued by clients.

Methods

UserIdentityValidator.ValidateAsync(BackChannelAuthenticationValidationContext) Method

Validates the user's identity based on the provided identity hints, such as login hint, login hint token, or ID token hint. It ensures that only one identity hint is present and attempts to process the hint to confirm the user's identity.

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.BackChannelAuthentication.Validation.BackChannelAuthenticationValidationContext context);

Parameters

context BackChannelAuthenticationValidationContext

Contains the backchannel authentication request and client information.

Implements ValidateAsync(BackChannelAuthenticationValidationContext)

Returns

System.Threading.Tasks.Task<OidcError>
Returns a OidcError if the identity validation fails, or null if the identity is successfully validated.