Show / Hide Table of Contents

# Namespace OpenIddict.Validation

### Classes

#### OpenIddictValidationConfiguration

Contains the methods required to ensure that the OpenIddict validation configuration is valid.

#### OpenIddictValidationConstants

#### OpenIddictValidationConstants.Properties

#### OpenIddictValidationDispatcher

#### OpenIddictValidationEvents

#### OpenIddictValidationEvents.ApplyConfigurationRequestContext

Represents an event called for each request to the configuration endpoint to send the configuration request to the remote authorization server.

#### OpenIddictValidationEvents.ApplyCryptographyRequestContext

Represents an event called for each request to the cryptography endpoint to send the cryptography request to the remote authorization server.

#### OpenIddictValidationEvents.ApplyIntrospectionRequestContext

Represents an event called for each request to the introspection endpoint to send the introspection request to the remote authorization server.

#### OpenIddictValidationEvents.BaseContext

Represents an abstract base class used for certain event contexts.

#### OpenIddictValidationEvents.BaseExternalContext

Represents an abstract base class used for certain event contexts.

#### OpenIddictValidationEvents.BaseRequestContext

Represents an abstract base class used for certain event contexts.

#### OpenIddictValidationEvents.BaseValidatingContext

Represents an abstract base class used for certain event contexts.

#### OpenIddictValidationEvents.ExtractConfigurationResponseContext

Represents an event called for each configuration response to extract the response parameters from the server response.

#### OpenIddictValidationEvents.ExtractCryptographyResponseContext

Represents an event called for each cryptography response to extract the response parameters from the server response.

#### OpenIddictValidationEvents.ExtractIntrospectionResponseContext

Represents an event called for each introspection response to extract the response parameters from the server response.

#### OpenIddictValidationEvents.HandleConfigurationResponseContext

Represents an event called for each validated configuration response.

#### OpenIddictValidationEvents.HandleCryptographyResponseContext

Represents an event called for each validated cryptography response.

#### OpenIddictValidationEvents.HandleIntrospectionResponseContext

Represents an event called for each validated introspection response.

#### OpenIddictValidationEvents.PrepareConfigurationRequestContext

Represents an event called for each request to the configuration endpoint to give the user code a chance to add parameters to the configuration request.

#### OpenIddictValidationEvents.PrepareCryptographyRequestContext

Represents an event called for each request to the cryptography endpoint to give the user code a chance to add parameters to the cryptography request.

#### OpenIddictValidationEvents.PrepareIntrospectionRequestContext

Represents an event called for each request to the introspection endpoint to give the user code a chance to add parameters to the introspection request.

#### OpenIddictValidationEvents.ProcessAuthenticationContext

Represents an event called when processing an authentication operation.

#### OpenIddictValidationEvents.ProcessChallengeContext

Represents an event called when processing a challenge response.

#### OpenIddictValidationEvents.ProcessErrorContext

Represents an event called when processing an errored response.

#### OpenIddictValidationEvents.ProcessRequestContext

Represents an event called when processing an incoming request.

#### OpenIddictValidationFactory

#### OpenIddictValidationHandler<TContext>

Represents a handler able to process `TContext` events.

#### OpenIddictValidationHandlerDescriptor

Represents an immutable descriptor of an OpenIddict validation event handler.

#### OpenIddictValidationHandlerDescriptor.Builder<TContext>

Contains methods allowing to build a descriptor instance.

#### OpenIddictValidationHandlerFilters

#### OpenIddictValidationHandlerFilters.RequireAuthorizationEntryValidationEnabled

Represents a filter that excludes the associated handlers if authorization validation was not enabled.

#### OpenIddictValidationHandlerFilters.RequireIntrospectionValidation

Represents a filter that excludes the associated handlers if introspection is not used.

#### OpenIddictValidationHandlerFilters.RequireLocalValidation

Represents a filter that excludes the associated handlers if local validation is not used.

#### OpenIddictValidationHandlerFilters.RequireTokenEntryValidationEnabled

Represents a filter that excludes the associated handlers if token validation was not enabled.

#### OpenIddictValidationHandlers

#### OpenIddictValidationHandlers.AttachDefaultChallengeError

Contains the logic responsible of ensuring that the challenge response contains an appropriate error.

#### OpenIddictValidationHandlers.Discovery

#### OpenIddictValidationHandlers.Discovery.ExtractCryptographyEndpoint

Contains the logic responsible of extracting the JWKS endpoint address from the discovery document.

#### OpenIddictValidationHandlers.Discovery.ExtractIntrospectionEndpoint

Contains the logic responsible of extracting the introspection endpoint address from the discovery document.

#### OpenIddictValidationHandlers.Discovery.ExtractSigningKeys

Contains the logic responsible of extracting the signing keys from the JWKS document.

#### OpenIddictValidationHandlers.Discovery.ValidateIssuer

Contains the logic responsible of extracting the issuer from the discovery document.

#### OpenIddictValidationHandlers.HandleErrorResponse<TContext>

Contains the logic responsible of extracting potential errors from the response.

#### OpenIddictValidationHandlers.Introspection

#### OpenIddictValidationHandlers.Introspection.AttachCredentials

Contains the logic responsible of attaching the client credentials to the introspection request.

#### OpenIddictValidationHandlers.Introspection.AttachToken

Contains the logic responsible of attaching the token to the introspection request.

#### OpenIddictValidationHandlers.Introspection.HandleInactiveResponse

Contains the logic responsible of extracting the active: false marker from the response.

#### OpenIddictValidationHandlers.Introspection.PopulateClaims

Contains the logic responsible of extracting the claims from the introspection response.

#### OpenIddictValidationHandlers.Introspection.ValidateIssuer

Contains the logic responsible of extracting the issuer from the introspection response.

#### OpenIddictValidationHandlers.Introspection.ValidateTokenType

Contains the logic responsible of extracting and validating the token type from the introspection response.

#### OpenIddictValidationHandlers.Introspection.ValidateWellKnownClaims

Contains the logic responsible of validating the well-known claims contained in the introspection response.

#### OpenIddictValidationHandlers.IntrospectToken

Contains the logic responsible of validating the tokens using OAuth 2.0 introspection.

#### OpenIddictValidationHandlers.MapInternalClaims

Contains the logic responsible of mapping internal claims used by OpenIddict.

#### OpenIddictValidationHandlers.NormalizeScopeClaims

Contains the logic responsible of normalizing the scope claims stored in the tokens.

#### OpenIddictValidationHandlers.RestoreReferenceTokenProperties

Contains the logic responsible of restoring the properties associated with a reference token entry. Note: this handler is not used when the degraded mode is enabled.

#### OpenIddictValidationHandlers.ValidateAudience

Contains the logic responsible of rejecting authentication demands containing access tokens that were issued to be used by another audience/resource server.

#### OpenIddictValidationHandlers.ValidateAuthorizationEntry

Contains the logic responsible of authentication demands a token whose associated authorization entry is no longer valid (e.g was revoked). Note: this handler is not used when the degraded mode is enabled.

#### OpenIddictValidationHandlers.ValidateExpirationDate

Contains the logic responsible of rejecting authentication demands containing expired access tokens.

#### OpenIddictValidationHandlers.ValidateIdentityModelToken

Contains the logic responsible of validating tokens generated using IdentityModel.

#### OpenIddictValidationHandlers.ValidatePrincipal

Contains the logic responsible of rejecting authentication demands for which no valid principal was resolved.

#### OpenIddictValidationHandlers.ValidateReferenceTokenIdentifier

Contains the logic responsible of validating reference token identifiers. Note: this handler is not used when the degraded mode is enabled.

#### OpenIddictValidationHandlers.ValidateToken

Contains the logic responsible of ensuring a token was correctly resolved from the context.

#### OpenIddictValidationHandlers.ValidateTokenEntry

Contains the logic responsible of authentication demands a token whose associated token entry is no longer valid (e.g was revoked). Note: this handler is not used when the degraded mode is enabled.

#### OpenIddictValidationHelpers

Exposes extensions simplifying the integration with the OpenIddict validation services.

#### OpenIddictValidationOptions

Provides various settings needed to configure the OpenIddict validation handler.

#### OpenIddictValidationRetriever

#### OpenIddictValidationService

#### OpenIddictValidationTransaction

Represents the context associated with an OpenID Connect validation request.

### Interfaces

#### IOpenIddictValidationDispatcher

#### IOpenIddictValidationFactory

#### IOpenIddictValidationHandler<TContext>

Represents a handler able to process `TContext` events.

#### IOpenIddictValidationHandlerFilter<TContext>

### Enums

#### OpenIddictValidationEndpointType

Represents the type of an OpenIddict validation endpoint.

#### OpenIddictValidationHandlerType

Represents the type of an OpenIddict validation handler.

#### OpenIddictValidationType

Represents the type of validation performed by the OpenIddict validation services.