IAuthorizationRequestUriGenerator Interface

Produces unique, unguessable request URIs used to reference stored authorization request objects, such as those handled by Pushed Authorization Requests (RFC 9126) via the request_uri parameter. Implementations must derive the URI from a high-entropy, cryptographically secure random value to prevent an attacker from guessing or enumerating active authorization requests.

public interface IAuthorizationRequestUriGenerator

Derived
↳ AuthorizationRequestUriGenerator

Methods

IAuthorizationRequestUriGenerator.GenerateRequestUri() Method

Generates a unique, unpredictable URI suitable for use as the request_uri reference for a previously stored authorization request.

System.Uri GenerateRequestUri();

Returns

System.Uri
A unique URI that serves as the identifier for a specific authorization request.