Abblix.Oidc.Server.Features.UserInfo Namespace

Abblix.Oidc.Server

Abblix.Oidc.Server.Features.UserInfo Namespace

Classes
PairwiseSubjectSettings	Configuration for pairwise subject identifier generation. The salt is a server-side secret that prevents external computation of pairwise identifiers, ensuring that even with knowledge of the user's real subject and the client ID, an attacker cannot derive the pairwise identifier.
ScopeClaimsProvider	Implements the IScopeClaimsProvider interface to provide claim names based on requested scopes and claims. This class manages the association between scopes and the specific claims they include, facilitating the retrieval of appropriate claims for given scopes during the authorization process.
SubjectTypeConverter	Implements conversion of subject identifiers for end-users based on the subject type requested by the client. Uses HMAC-SHA256 with a server-side secret salt for pairwise identifiers, per OpenID Connect Core Section 8.1.
UserClaimsProvider	Handles the retrieval of user claims for authentication sessions, ensuring compliance with requested scopes and specific claim details. This class integrates directly with user information providers and scope-to-claim mappings to fetch and validate the necessary user data. It supports converting user data into claims that adhere to OpenID Connect standards, tailored to the specific needs of the client making the request.

Interfaces
IScopeClaimsProvider	Defines a service responsible for determining the claims associated with specific OAuth 2.0 and OpenID Connect scopes. This interface facilitates the mapping of requested scopes to their corresponding claims, enabling effective claims management based on the authorization policies and client request parameters.
ISubjectTypeConverter	Defines the interface for a service that converts user subject identifiers according to the client's specified subject type. This conversion ensures that the subject identifier presented to the client is in the format that the client expects, based on its configuration.
IUserClaimsProvider	Defines an interface for retrieving user-specific claims based on authentication sessions and requested claims. This interface plays a crucial role in authentication flows, where it extracts and formats user data for inclusion in tokens or other authorization responses, ensuring compliance with specified scopes and claim requests.
IUserInfoProvider	Provides functionality to retrieve user information as JWT claims, supporting both simple and structured claim values. This interface enables the dynamic extraction and packaging of user attributes into JWT claims, accommodating a variety of claim types including those that require complex, structured data beyond traditional scalar values.