Skip to main content

IGrantIdGenerator Interface

Abblix.Oidc.Server​

Abblix.Oidc.Server.Features.RandomGenerators​

IGrantIdGenerator Interface​

Produces unique identifiers for refresh-token grants, used as the grant_id claim that binds every refresh token derived from one authorization grant into a single lineage (a "token family" in RFC 9700 terms). Rotation and family revocation (RFC 9700 §4.14.2) rely on this identifier, so implementations must generate values with sufficient entropy to make collisions and guessing impractical.

public interface IGrantIdGenerator

Derived
↳ GrantIdGenerator

Methods​

IGrantIdGenerator.GenerateGrantId() Method​

Generates a new unique identifier suitable for the grant_id claim of a refresh token.

string GenerateGrantId();

Returns​

System.String
A unique identifier for a refresh-token grant lineage.