IRegistrationAccessTokenStore Interface
Abblix.Oidc.Server
Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Interfaces
IRegistrationAccessTokenStore Interface
Records, for each registered client, the identifier (jti) of the registration access token currently authorized to manage it via the RFC 7592 client configuration endpoint. The token validator accepts only a token whose jti matches the stored value, so rotating the token on update (storing a fresh jti) invalidates every previously issued token (RFC 7592 §5).
public interface IRegistrationAccessTokenStore
Derived
↳ RegistrationAccessTokenStore
Remarks
The binding outlives any single request and must be shared across all server replicas, so the default implementation persists it in the distributed entity storage rather than in process memory. The binding has no expiration — it lives as long as the client is registered — and is removed when the client is deregistered.
Methods
IRegistrationAccessTokenStore.GetTokenIdAsync(string) Method
Retrieves the jti of the client's current registration access token.
System.Threading.Tasks.Task<string?> GetTokenIdAsync(string clientId);
Parameters
clientId System.String
The identifier of the client.
Returns
System.Threading.Tasks.Task<System.String>
The stored jti, or null when no binding is recorded (a statically configured client,
or one registered before the binding existed) — in which case the validator does not enforce
the binding.
IRegistrationAccessTokenStore.RemoveAsync(string) Method
Removes the binding for a deregistered client.
System.Threading.Tasks.Task RemoveAsync(string clientId);
Parameters
clientId System.String
The identifier of the client being removed.
Returns
IRegistrationAccessTokenStore.SetTokenIdAsync(string, string) Method
Records tokenId as the jti of the client's current registration access token, replacing any previously stored value (which thereby becomes invalid).
System.Threading.Tasks.Task SetTokenIdAsync(string clientId, string tokenId);
Parameters
clientId System.String
The identifier of the client the token manages.
tokenId System.String
The jti embedded in the newly issued registration access token.