Class OidcClientAuthenticationOptions

Namespace

Arc4u.OAuth2.Client.Authentication.Options

Assembly

Arc4u.OAuth2.Client.Authentication.dll

The options of the OpenID Connect authentication of a client (desktop or mobile) application, given to AuthenticationExtensions AddOidcClientAuthentication or filled from the configuration by its configuration based overload.

public class OidcClientAuthenticationOptions

Inheritance

object

OidcClientAuthenticationOptions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Properties

CallbackPath

Gets or sets the redirect uri sent to the authority after the sign-in. The default is /.

public string CallbackPath { get; set; }

Property Value

string

ClaimsIdentifierOptions

Gets or sets the action that fills the claim types identifying a user. When null, the object identifier claim types (ObjectIdentifier and OID of ClaimTypes) are used.

public Action<ClaimsIdentifierOption>? ClaimsIdentifierOptions { get; set; }

Property Value

Action<ClaimsIdentifierOption>

ClockSkew

Gets or sets the tolerated clock difference when tokens are validated. The default is 5 minutes.

public TimeSpan ClockSkew { get; set; }

Property Value

TimeSpan

DefaultAuthority

Gets or sets the authority (identity provider). Required.

public AuthorityOptions DefaultAuthority { get; set; }

Property Value

AuthorityOptions

ForceRefreshTimeoutTimeSpan

Gets or sets the remaining lifetime under which the access token is refreshed. The default is 5 minutes. The access token is renewed with the refresh token once it expires in less than this value.

public TimeSpan ForceRefreshTimeoutTimeSpan { get; set; }

Property Value

TimeSpan

LoadProfile

Gets or sets a value indicating whether the profile of the user is loaded from the user info endpoint. The default is false.

public bool LoadProfile { get; set; }

Property Value

bool

LoginTimeout

Gets or sets the longest time an interactive login (in the browser) can take. The default is 5 minutes. The token calls are made one at a time while the user logs in: a call that waits longer than this value fails, and a login that does not complete in time is cancelled.

public TimeSpan LoginTimeout { get; set; }

Property Value

TimeSpan

OidcClientSettingsOption

Gets or sets the action that fills the OidcClientSettingsOption (client id and scopes). Required.

public Action<OidcClientSettingsOption>? OidcClientSettingsOption { get; set; }

Property Value

Action<OidcClientSettingsOption>

PostLogoutRedirectUri

Gets or sets the uri the authority redirects to after the sign-out. The default is /.

public string PostLogoutRedirectUri { get; set; }

Property Value

string

RefreshTokenLifetime

Gets or sets the assumed lifetime of a refresh token. The default is 90 days. A refresh token older than this value is not used: the user logs in again. Set it to the lifetime configured in the identity provider.

public TimeSpan RefreshTokenLifetime { get; set; }

Property Value

TimeSpan

SecureCacheTimeout

Gets or sets the longest time a read, write or removal of the tokens in the secure cache can take during a sign-out or a token write. The default is 30 seconds.

public TimeSpan SecureCacheTimeout { get; set; }

Property Value

TimeSpan