Options

AuthenticationHandler.cs (1)

155Options = OptionsMonitor.Get(Scheme.Name);

Authentication\Connection\ConnectionTypeAuthenticationHandler.cs (2)

25if (!Options.RequiredConnectionTypes.Any(connectionTypeFeature.ConnectionTypes.Contains)) 27return Task.FromResult(AuthenticateResult.Fail($"Connection types '{string.Join(", ", Options.RequiredConnectionTypes)}' are not enabled on this connection."));

AuthenticationHandler.cs (10)

99protected virtual string ClaimsIssuer => Options.ClaimsIssuer ?? Scheme.Name; 157TimeProvider = Options.TimeProvider ?? TimeProvider.System; 171Events = Options.Events; 172if (Options.EventsType != null) 174Events = Context.RequestServices.GetRequiredService(Options.EventsType); 206var target = scheme ?? Options.ForwardDefaultSelector?.Invoke(Context) ?? Options.ForwardDefault; 217var target = ResolveTarget(Options.ForwardAuthenticate); 308var target = ResolveTarget(Options.ForwardChallenge); 323var target = ResolveTarget(Options.ForwardForbid);

RemoteAuthenticationHandler.cs (12)

28protected string? SignInScheme => Options.SignInScheme; 69=> Task.FromResult(Options.CallbackPath == Request.Path); 116var errorContext = new RemoteFailureContext(Context, Scheme, Options, exception) 146var ticketContext = new TicketReceivedContext(Context, Scheme, Options, ticket) 234var cookieOptions = Options.CorrelationCookie.Build(Context, TimeProvider.GetUtcNow()); 238var cookieName = Options.CorrelationCookie.Name + correlationId; 254Logger.CorrelationPropertyNotFound(Options.CorrelationCookie.Name!); 260var cookieName = Options.CorrelationCookie.Name + correlationId; 269var cookieOptions = Options.CorrelationCookie.Build(Context, TimeProvider.GetUtcNow()); 290var context = new AccessDeniedContext(Context, Scheme, Options) 292AccessDeniedPath = Options.AccessDeniedPath, 295ReturnUrlParameter = Options.ReturnUrlParameter

SignInAuthenticationHandler.cs (1)

40var target = ResolveTarget(Options.ForwardSignIn);

SignOutAuthenticationHandler.cs (1)

39var target = ResolveTarget(Options.ForwardSignOut);

BearerTokenHandler.cs (7)

27var messageReceivedContext = new MessageReceivedContext(Context, Scheme, Options); 43var ticket = Options.BearerTokenProtector.Unprotect(token); 69properties.ExpiresUtc = utcNow + Options.BearerTokenExpiration; 73AccessToken = Options.BearerTokenProtector.Protect(CreateBearerTicket(user, properties)), 74ExpiresIn = (long)Options.BearerTokenExpiration.TotalSeconds, 75RefreshToken = Options.RefreshTokenProtector.Protect(CreateRefreshTicket(user, utcNow)), 110ExpiresUtc = utcNow + Options.RefreshTokenExpiration

CookieAuthenticationHandler.cs (46)

98if (issuedUtc != null && expiresUtc != null && Options.SlidingExpiration && allowRefresh) 103var eventContext = new CookieSlidingExpirationContext(Context, Scheme, Options, ticket, timeElapsed, timeRemaining) 152var cookie = Options.CookieManager.GetRequestCookie(Context, Options.Cookie.Name!); 158var ticket = Options.TicketDataFormat.Unprotect(cookie, GetTlsTokenBinding()); 164if (Options.SessionStore != null) 172ticket = await Options.SessionStore.RetrieveAsync(claim.Value, Context, Context.RequestAborted); 185if (Options.SessionStore != null) 187await Options.SessionStore.RemoveAsync(_sessionKey!, Context, Context.RequestAborted); 213var context = new CookieValidatePrincipalContext(Context, Scheme, Options, result.Ticket); 231var cookieOptions = Options.Cookie.Build(Context); 262if (Options.SessionStore != null && _sessionKey != null) 264await Options.SessionStore.RenewAsync(_sessionKey, ticket, Context, Context.RequestAborted); 267new[] { new Claim(SessionIdClaim, _sessionKey, ClaimValueTypes.String, Options.ClaimsIssuer) }, 272var cookieValue = Options.TicketDataFormat.Protect(ticket, GetTlsTokenBinding()); 280Options.CookieManager.AppendResponseCookie( 282Options.Cookie.Name!, 306Options, 324signInContext.Properties.ExpiresUtc = issuedUtc.Add(Options.ExpireTimeSpan); 331var expiresUtc = signInContext.Properties.ExpiresUtc ?? issuedUtc.Add(Options.ExpireTimeSpan); 337if (Options.SessionStore != null) 342await Options.SessionStore.RenewAsync(_sessionKey, ticket, Context, Context.RequestAborted); 346_sessionKey = await Options.SessionStore.StoreAsync(ticket, Context, Context.RequestAborted); 351new[] { new Claim(SessionIdClaim, _sessionKey, ClaimValueTypes.String, Options.ClaimsIssuer) }, 352Options.ClaimsIssuer)); 356var cookieValue = Options.TicketDataFormat.Protect(ticket, GetTlsTokenBinding()); 358Options.CookieManager.AppendResponseCookie( 360Options.Cookie.Name!, 369Options); 374var shouldHonorReturnUrlParameter = Options.LoginPath.HasValue && OriginalPath == Options.LoginPath; 390if (Options.SessionStore != null && _sessionKey != null) 392await Options.SessionStore.RemoveAsync(_sessionKey, Context, Context.RequestAborted); 398Options, 404Options.CookieManager.DeleteCookie( 406Options.Cookie.Name!, 410var shouldHonorReturnUrlParameter = Options.LogoutPath.HasValue && OriginalPath == Options.LogoutPath; 433redirectUri = Request.Query[Options.ReturnUrlParameter]; 443new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, redirectUri)); 469var accessDeniedUri = Options.AccessDeniedPath + QueryString.Create(Options.ReturnUrlParameter, returnUrl); 470var redirectContext = new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, BuildRedirectUri(accessDeniedUri)); 483var loginUri = Options.LoginPath + QueryString.Create(Options.ReturnUrlParameter, redirectUri); 484var redirectContext = new RedirectContext<CookieAuthenticationOptions>(Context, Scheme, Options, properties, BuildRedirectUri(loginUri));

OAuthHandler.cs (16)

28protected HttpClient Backchannel => Options.Backchannel; 69var properties = Options.StateDataFormat.Unprotect(state); 133var codeExchangeContext = new OAuthCodeExchangeContext(properties, code.ToString(), BuildRedirectUri(Options.CallbackPath)); 148if (Options.SaveTokens) 202{ "client_id", Options.ClientId }, 204{ "client_secret", Options.ClientSecret }, 218var requestMessage = new HttpRequestMessage(HttpMethod.Post, Options.TokenEndpoint); 256var context = new OAuthCreatingTicketContext(new ClaimsPrincipal(identity), properties, Context, Scheme, Options, Backchannel, tokens, user.RootElement); 273var authorizationEndpoint = BuildChallengeUrl(properties, BuildRedirectUri(Options.CallbackPath)); 275Context, Scheme, Options, 307{ "client_id", Options.ClientId }, 313if (Options.UsePkce) 329parameters["state"] = Options.StateDataFormat.Protect(properties); 331foreach (var additionalParameter in Options.AdditionalAuthorizationParameters) 336return QueryHelpers.AddQueryString(Options.AuthorizationEndpoint, parameters!); 353=> FormatScope(Options.Scope);