Skip to main content

ConfirmationValidator Class

Abblix.Oidc.Server​

Abblix.Oidc.Server.Endpoints.EndSession.Validation​

ConfirmationValidator Class​

Enforces the end-user confirmation step described in OpenID Connect RP-Initiated Logout 1.0 §2: when the request omits id_token_hint the OP cannot trust that the user really initiated the logout, so a UI confirmation must precede the call. This validator surfaces ConfirmationRequired until the host echoes back confirmed=true.

public class ConfirmationValidator : Abblix.Oidc.Server.Endpoints.EndSession.Validation.IEndSessionContextValidator

Inheritance System.Object → ConfirmationValidator

Implements IEndSessionContextValidator

Methods​

ConfirmationValidator.ValidateAsync(EndSessionValidationContext) Method​

Performs this validator's check against the shared context.

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.EndSession.Validation.EndSessionValidationContext context);

Parameters​

context EndSessionValidationContext​

Mutable validation context shared with subsequent steps; this validator may populate fields (such as resolved ClientInfo or parsed id_token_hint).

Implements ValidateAsync(EndSessionValidationContext)

Returns​

System.Threading.Tasks.Task<OidcError>
null if the request passes this step, otherwise the error to surface.