Skip to main content

RevocationHandler Class

Abblix.Oidc.Server

Abblix.Oidc.Server.Endpoints.Revocation

RevocationHandler Class

Manages the handling of token revocation requests in accordance with OAuth 2.0 specifications, ensuring that such requests are properly validated and processed to revoke tokens as intended.

public class RevocationHandler : Abblix.Oidc.Server.Endpoints.Revocation.Interfaces.IRevocationHandler

Inheritance System.Object → RevocationHandler

Implements IRevocationHandler

Constructors

RevocationHandler(IRevocationRequestValidator, IRevocationRequestProcessor) Constructor

Manages the handling of token revocation requests in accordance with OAuth 2.0 specifications, ensuring that such requests are properly validated and processed to revoke tokens as intended.

public RevocationHandler(Abblix.Oidc.Server.Endpoints.Revocation.Interfaces.IRevocationRequestValidator validator, Abblix.Oidc.Server.Endpoints.Revocation.Interfaces.IRevocationRequestProcessor processor);

Parameters

validator IRevocationRequestValidator

An implementation of IRevocationRequestValidator responsible for validating the revocation request against the OAuth 2.0 specifications.

processor IRevocationRequestProcessor

An implementation of IRevocationRequestProcessor responsible for processing validated revocation requests to effectively revoke tokens.

Methods

RevocationHandler.HandleAsync(RevocationRequest, ClientRequest) Method

Asynchronously handles a token revocation request by validating it and then processing it if the validation succeeds.

public System.Threading.Tasks.Task<Abblix.Utils.Result<Abblix.Oidc.Server.Endpoints.Revocation.Interfaces.TokenRevoked,Abblix.Oidc.Server.Common.OidcError>> HandleAsync(Abblix.Oidc.Server.Model.RevocationRequest revocationRequest, Abblix.Oidc.Server.Model.ClientRequest clientRequest);

Parameters

revocationRequest RevocationRequest

The revocation request details, mapped to the model expected by the system.

clientRequest ClientRequest

Additional client request information that may be necessary for validation.

Implements HandleAsync(RevocationRequest, ClientRequest)

Returns

System.Threading.Tasks.Task<Abblix.Utils.Result<TokenRevoked,OidcError>>
A System.Threading.Tasks.Task that resolves to a Abblix.Utils.Result<> containing either TokenRevoked on success or OidcError on failure.

Remarks

This method plays a critical role in maintaining the security and integrity of the OAuth 2.0 ecosystem by allowing tokens to be revoked when they are no longer needed or when a security issue necessitates their invalidation. It ensures that revocation requests are thoroughly vetted before any action is taken, preventing unauthorized or malicious attempts to revoke tokens.