Interface IPushedAuthorizationService

Namespace

Duende.IdentityServer.Services

Assembly

Duende.IdentityServer.dll

Contract for a service that performs high-level operations on pushed authorization requests.

public interface IPushedAuthorizationService

Methods

ConsumeAsync(string)

Consumes the pushed authorization request, indicating that it should not be used again. Repeated use could indicate some form of replay attack, but also could indicate that an end user refreshed their browser or otherwise retried a request that consumed the pushed authorization request.

Task ConsumeAsync(string referenceValue)

Parameters

referenceValue string

The reference value of the pushed authorization request. The reference value is the identifier within the request_uri parameter.

Returns

Task

GetPushedAuthorizationRequestAsync(string)

Gets the raw pushed authorization parameters.

Task<DeserializedPushedAuthorizationRequest?> GetPushedAuthorizationRequestAsync(string referenceValue)

Parameters

referenceValue string

The reference value of the pushed authorization request. The reference value is the identifier within the request_uri parameter.

Returns

Task<DeserializedPushedAuthorizationRequest>

The deserialized pushed authorization request, or null if the request does not exist or was previously consumed.

StoreAsync(DeserializedPushedAuthorizationRequest)

Serializes, data protects, and stores the pushed authorization request.

Task StoreAsync(DeserializedPushedAuthorizationRequest pushedAuthorizationRequest)

Parameters

pushedAuthorizationRequest DeserializedPushedAuthorizationRequest

The pushed authorization request without serialization or data protection applied

Returns

Task