Class OidcClientAuthenticationSectionOptions

Namespace

Arc4u.OAuth2.Client.Authentication.Options

Assembly

Arc4u.OAuth2.Client.Authentication.dll

The configuration layout of the OpenID Connect authentication of a client application. It is bound from the Authentication section (or the section name given to AddOidcClientAuthentication). The *Path properties are the paths of the other configuration sections read during registration.

public class OidcClientAuthenticationSectionOptions

Inheritance

object

OidcClientAuthenticationSectionOptions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Properties

ApiExtraContextAuthenticationSection

Gets or sets the paths of the sections holding the extra authorization and token request parameters. The defaults are Authentication:OidcClient.Settings:AuthorizationEndpoint and Authentication:OidcClient.Settings:TokenEndpoint.

public ApiExtraContextAuthenticationSectionOption ApiExtraContextAuthenticationSection { get; set; }

Property Value

ApiExtraContextAuthenticationSectionOption

ApplicationNameSectionPath

Gets or sets the configuration key holding the application name. The default is Application.configuration:ApplicationName. It is not read by the client authentication registration.

public string ApplicationNameSectionPath { get; set; }

Property Value

string

CallbackPath

Gets or sets the redirect uri sent to the authority after the sign-in. The default is /.

public string CallbackPath { get; set; }

Property Value

string

ClaimsFillerSectionPath

Gets or sets the path of the section holding the ClaimsFillerOptions. The default is Authentication:ClaimsMiddleWare:ClaimsFiller.

public string ClaimsFillerSectionPath { get; set; }

Property Value

string

ClaimsIdentifierSectionPath

Gets or sets the path of the section holding the claim types that identify a user. The default is Authentication:ClaimsIdentifier.

public string ClaimsIdentifierSectionPath { get; set; }

Property Value

string

ClockSkew

Gets or sets the tolerated clock difference when tokens are validated. The default is 5 minutes. It is copied to ClockSkew.

public TimeSpan ClockSkew { get; set; }

Property Value

TimeSpan

DefaultAuthority

Gets or sets the authority (identity provider). Required.

public AuthorityOptions DefaultAuthority { get; set; }

Property Value

AuthorityOptions

DomainMappingsSectionPath

Gets or sets the path of the section holding the domain mappings. The default is Authentication:DomainsMapping.

public string DomainMappingsSectionPath { get; set; }

Property Value

string

ForceRefreshTimeoutTimeSpan

Gets or sets the remaining lifetime under which the access token is refreshed. The default is 5 minutes. The access token is renewed with the refresh token once it expires in less than this value.

public TimeSpan ForceRefreshTimeoutTimeSpan { get; set; }

Property Value

TimeSpan

LoadProfile

Gets or sets a value indicating whether the profile of the user is loaded from the user info endpoint. The default is false.

public bool LoadProfile { get; set; }

Property Value

bool

LoginTimeout

Gets or sets the longest time an interactive login (in the browser) can take. The default is 5 minutes. The token calls are made one at a time while the user logs in: a call that waits longer than this value fails, and a login that does not complete in time is cancelled.

public TimeSpan LoginTimeout { get; set; }

Property Value

TimeSpan

Remarks

It is copied to LoginTimeout.

OidcClientIdSettingsSectionPath

Gets or sets the path of the section holding the OidcClientSettingsOption. The default is Authentication:OidcClient.Settings.

public string OidcClientIdSettingsSectionPath { get; set; }

Property Value

string

PostLogoutRedirectUri

Gets or sets the uri the authority redirects to after the sign-out. The default is /.

public string PostLogoutRedirectUri { get; set; }

Property Value

string

RefreshTokenLifetime

Gets or sets the assumed lifetime of a refresh token. The default is 90 days. A refresh token older than this value is not used: the user logs in again. Set it to the lifetime configured in the identity provider.

public TimeSpan RefreshTokenLifetime { get; set; }

Property Value

TimeSpan

SecureCacheTimeout

Gets or sets the longest time a read, write or removal of the tokens in the secure cache can take during a sign-out or a token write. The default is 30 seconds.

public TimeSpan SecureCacheTimeout { get; set; }

Property Value

TimeSpan

Remarks

It is copied to SecureCacheTimeout.