Skip to main content

SoftwareStatementValidator Class

Abblix.Oidc.Server​

Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation​

SoftwareStatementValidator Class​

Validates the software_statement parameter in a client registration request per RFC 7591 Section 2.3. Software statements are signed JWTs issued by a third-party authority asserting metadata about client software.

public class SoftwareStatementValidator : Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.IClientRegistrationContextValidator

Inheritance System.Object → SoftwareStatementValidator

Implements IClientRegistrationContextValidator

Constructors​

SoftwareStatementValidator(ILogger<SoftwareStatementValidator>, IJsonWebTokenValidator, IOptionsMonitor<OidcOptions>, ISecureHttpFetcher) Constructor​

Validates the software_statement parameter in a client registration request per RFC 7591 Section 2.3. Software statements are signed JWTs issued by a third-party authority asserting metadata about client software.

public SoftwareStatementValidator(Microsoft.Extensions.Logging.ILogger<Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.SoftwareStatementValidator> logger, Abblix.Jwt.IJsonWebTokenValidator jwtValidator, Microsoft.Extensions.Options.IOptionsMonitor<Abblix.Oidc.Server.Common.Configuration.OidcOptions> options, Abblix.Oidc.Server.Features.SecureHttpFetch.ISecureHttpFetcher secureFetcher);

Parameters​

logger Microsoft.Extensions.Logging.ILogger<SoftwareStatementValidator>​

Logger for recording validation operations.

jwtValidator IJsonWebTokenValidator​

Validates the software statement JWT signature and claims.

options Microsoft.Extensions.Options.IOptionsMonitor<OidcOptions>​

OIDC options containing software statement configuration.

secureFetcher ISecureHttpFetcher​

HTTP fetcher with SSRF protection for retrieving trusted issuer JWKS.

Methods​

SoftwareStatementValidator.ValidateAsync(ClientRegistrationValidationContext) Method​

Validates the slice of registration metadata this implementation owns. May mutate ClientRegistrationValidationContext with derived values (for example the resolved sector identifier).

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.ClientRegistrationValidationContext context);

Parameters​

context ClientRegistrationValidationContext​

The shared validation context for the current request.

Implements ValidateAsync(ClientRegistrationValidationContext)

Returns​

System.Threading.Tasks.Task<OidcError>
An OidcError describing the rejection, or null when valid.