Skip to main content

SubjectTypeValidator Class

Abblix.Oidc.Server​

Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation​

SubjectTypeValidator Class​

Validates the OIDC Core §8 subject_type metadata and computes the pairwise sector identifier per OIDC Core §8.1: when pairwise is requested, either a supplied sector_identifier_uri (HTTPS, JSON document of redirect URIs) is dereferenced and cross-checked against the registered redirect_uris, or all redirect URIs must share a single host. The resolved host is stored on the context for later persistence.

public class SubjectTypeValidator : Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.IClientRegistrationContextValidator

Inheritance System.Object → SubjectTypeValidator

Implements IClientRegistrationContextValidator

Constructors​

SubjectTypeValidator(ILogger<SubjectTypeValidator>, ISecureHttpFetcher) Constructor​

Validates the OIDC Core §8 subject_type metadata and computes the pairwise sector identifier per OIDC Core §8.1: when pairwise is requested, either a supplied sector_identifier_uri (HTTPS, JSON document of redirect URIs) is dereferenced and cross-checked against the registered redirect_uris, or all redirect URIs must share a single host. The resolved host is stored on the context for later persistence.

public SubjectTypeValidator(Microsoft.Extensions.Logging.ILogger<Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.SubjectTypeValidator> logger, Abblix.Oidc.Server.Features.SecureHttpFetch.ISecureHttpFetcher secureHttpFetcher);

Parameters​

logger Microsoft.Extensions.Logging.ILogger<SubjectTypeValidator>​

Logger used for warnings about sector-identifier mismatches.

secureHttpFetcher ISecureHttpFetcher​

SSRF-protected fetcher for the sector identifier document.

Methods​

SubjectTypeValidator.ValidateAsync(ClientRegistrationValidationContext) Method​

Validates the slice of registration metadata this implementation owns. May mutate ClientRegistrationValidationContext with derived values (for example the resolved sector identifier).

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.ClientRegistrationValidationContext context);

Parameters​

context ClientRegistrationValidationContext​

The shared validation context for the current request.

Implements ValidateAsync(ClientRegistrationValidationContext)

Returns​

System.Threading.Tasks.Task<OidcError>
An OidcError describing the rejection, or null when valid.