| AntiFramingHeaders | Header values that forbid a self-rendered HTML page (such as the form_post auto-submit page) from being embedded in another origin's frame, defending against clickjacking as required by the OAuth 2.0 Security Best Current Practice (RFC 9700, Section 4.16). Single source of truth shared by both transport adapters, paired with the framework's HeaderNames constants for the header names at the call site. |
| AuthenticationPropertiesExtensions | Extension methods for Microsoft.AspNetCore.Authentication.AuthenticationProperties. |
| AuthenticationSchemeAdapter | Adapts ASP.NET Authentication Scheme to the IAuthSessionService interface. This adapter allows the integration of the Abblix OIDC Server with standard ASP.NET authentication mechanisms, enabling the use of existing authentication schemes to manage OIDC sessions. |
| ClaimsPrincipalExtensions | Extension methods for System.Security.Claims.ClaimsPrincipal. |
| CookieOptionsExtensions | Maps the framework-neutral CookieOptions used by the core library to the ASP.NET Core Microsoft.AspNetCore.Http.CookieOptions consumed by Microsoft.AspNetCore.Http.IResponseCookies. Shared by the MVC and Minimal API transport adapters. |
| CorsServiceCollectionExtensions | Shared CORS registration for the OIDC transport adapters. Every OIDC endpoint is tagged with the policy name CorsPolicyName (the MVC controllers through [EnableCors], the Minimal API endpoints through RequireCors); this fills that policy so a browser client can read the endpoints cross-origin out of the box, and leaves the host in full control of it. |
| HttpRequestExtensions | Reads URL components from an Microsoft.AspNetCore.Http.HttpRequest. Touches only Microsoft.AspNetCore.Http.HttpRequest (no MVC, no Minimal API types), so it is shared by both transport adapters. |
| HttpRequestInfoProvider | Supplies the core with information about the current HTTP request, reading it from the ambient Microsoft.AspNetCore.Http.HttpContext. Touches only ASP.NET Core's HTTP abstractions (no MVC, no Minimal API types), so it is shared by both transport adapters as the default IRequestInfoProvider. |
| HttpResponseExtensions | Response-shaping helpers shared by the MVC and Minimal API adapters. |
| OidcCorsOptions | Host-configurable inputs for the default CORS policy (CorsPolicyName) that the MVC and Minimal API adapters register for the OIDC endpoints. |