SsrfHttpClientServiceCollectionExtensions Class
Abblix.Oidc.Server
Abblix.Oidc.Server.Features.SecureHttpFetch
SsrfHttpClientServiceCollectionExtensions Class
Registers HTTP clients that initiate requests to client-supplied URLs (CIBA notification endpoints, back-channel logout URIs, JWKS/issuer fetches). Every such client must route through SsrfValidatingHttpMessageHandler; bundling the handler with the client registration makes it impossible to add a new outbound client that silently skips SSRF protection.
public static class SsrfHttpClientServiceCollectionExtensions
Inheritance System.Object → SsrfHttpClientServiceCollectionExtensions
Methods
SsrfHttpClientServiceCollectionExtensions.AddSsrfHttpClient(this IServiceCollection, string, Action<IServiceProvider,HttpClient>) Method
Registers a named HTTP client whose primary handler is the SSRF-validating handler.
public static Microsoft.Extensions.DependencyInjection.IHttpClientBuilder AddSsrfHttpClient(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, string name, System.Action<System.IServiceProvider,System.Net.Http.HttpClient> configureClient);
Parameters
services Microsoft.Extensions.DependencyInjection.IServiceCollection
name System.String
configureClient System.Action<System.IServiceProvider,System.Net.Http.HttpClient>
Returns
Microsoft.Extensions.DependencyInjection.IHttpClientBuilder
SsrfHttpClientServiceCollectionExtensions.AddSsrfHttpClient<TClient,TImplementation>(this IServiceCollection, Action<IServiceProvider,HttpClient>) Method
Registers a typed HTTP client whose primary handler is the SSRF-validating handler.
public static Microsoft.Extensions.DependencyInjection.IHttpClientBuilder AddSsrfHttpClient<TClient,TImplementation>(this Microsoft.Extensions.DependencyInjection.IServiceCollection services, System.Action<System.IServiceProvider,System.Net.Http.HttpClient> configureClient)
where TClient : class
where TImplementation : class, TClient;