Namespace Arc4u.OAuth2.Events

StandardBearerEvents: The default JwtBearerEvents: failures are logged and answered with a 401 status, and the bearer token is kept in the BootstrapContext of the validated identity.

StandardCookieEvents: The default CookieAuthenticationEvents of the OpenID Connect authentication. On each request it loads the access and refresh tokens stored in the cookie ticket into the scoped TokenRefreshInfo and, when the access token expires in less than ForceRefreshTimeoutTimeSpan, refreshes it and renews the cookie. The access token is also stored in the BootstrapContext of the identity, like the bearer authentication does. The principal is rejected and the user signed out when the cookie is expired or the token cannot be refreshed.

StandardOpenIdConnectEvents: The default OpenIdConnectEvents. It validates the audience and the issuer of the access token received from the token endpoint (the issuer must be Issuer of the default authority when it is set, or the issuer of its metadata otherwise), forces https redirect urls (except for localhost), adds the extra authorization and token request parameters (see ApiExtraContextAuthenticationOption), and answers failures with a simple html message.