Skip to main content

JwtSubjectTokenResolver Class

Abblix.Oidc.Server​

Abblix.Oidc.Server.Features.TokenExchange​

JwtSubjectTokenResolver Class​

ISubjectTokenResolver for JWT-formatted subject tokens. Validates the JWT via IAuthServiceJwtValidator (signature, lifetime, registered claims) and projects the payload's sub, scope, and authorization_details claims into a SubjectTokenContext.

public sealed class JwtSubjectTokenResolver : Abblix.Oidc.Server.Features.TokenExchange.ISubjectTokenResolver

Inheritance System.Object → JwtSubjectTokenResolver

Implements ISubjectTokenResolver

Remarks​

Used for three RFC 8693 token-type URIs that share the JWT validation path: AccessToken, IdToken, and Jwt. The same instance is registered under all three keyed-DI keys (see AddTokenExchangeGrant); the System.Type property reports the instance's primary key so dispatch logging stays readable.

Constructors​

JwtSubjectTokenResolver(IAuthServiceJwtValidator) Constructor​

ISubjectTokenResolver for JWT-formatted subject tokens. Validates the JWT via IAuthServiceJwtValidator (signature, lifetime, registered claims) and projects the payload's sub, scope, and authorization_details claims into a SubjectTokenContext.

public JwtSubjectTokenResolver(Abblix.Oidc.Server.Features.Tokens.Validation.IAuthServiceJwtValidator jwtValidator);

Parameters​

jwtValidator IAuthServiceJwtValidator​

Validates own-issued JWTs (signature against AS keys, claims).

Remarks​

Used for three RFC 8693 token-type URIs that share the JWT validation path: AccessToken, IdToken, and Jwt. The same instance is registered under all three keyed-DI keys (see AddTokenExchangeGrant); the System.Type property reports the instance's primary key so dispatch logging stays readable.

Methods​

JwtSubjectTokenResolver.ResolveAsync(string, CancellationToken) Method​

Parses or looks up the wire-level subjectToken and returns the portable subject context on success, or an OidcError on failure.

public System.Threading.Tasks.Task<Abblix.Utils.Result<Abblix.Oidc.Server.Features.TokenExchange.SubjectTokenContext,Abblix.Oidc.Server.Common.OidcError>> ResolveAsync(string subjectToken, System.Threading.CancellationToken cancellationToken);

Parameters​

subjectToken System.String​

The exact subject_token string from the wire.

cancellationToken System.Threading.CancellationToken​

Cancellation token.

Implements ResolveAsync(string, CancellationToken)

Returns​

System.Threading.Tasks.Task<Abblix.Utils.Result<SubjectTokenContext,OidcError>>
The resolved subject context on success; an OIDC error describing the rejection reason on failure. The handler maps every failure to wire-level invalid_request per RFC 8693 §2.2.2.