AudienceStep Class

Requires the "aud" claim to name this receiver. RFC 8417 Section 2.2 only RECOMMENDS the claim, but a receiver that skips the check accepts events addressed to somebody else - the separate-audience strategy of Section 4.2 works only when audiences are actually checked - so the default profile checks, and a receiver in a closed deployment removes the step as a named decision rather than by leaving an option empty.

public sealed class AudienceStep : Abblix.SecurityEvents.Validation.ISecurityEventTokenValidator

Inheritance System.Object → AudienceStep

Implements ISecurityEventTokenValidator

Methods

AudienceStep.ValidateAsync(SecurityEventTokenValidationContext, CancellationToken) Method

Checks the token in flight.

public System.Threading.Tasks.ValueTask<Abblix.SecurityEvents.Validation.SecurityEventTokenValidationError?> ValidateAsync(Abblix.SecurityEvents.Validation.SecurityEventTokenValidationContext context, System.Threading.CancellationToken cancellationToken);