JwtIdPresenceStep Class
Requires the "jti" claim to be a non-empty string: "This claim is REQUIRED" (RFC 8417 Section 2.2). The identifier is what every receiver-side replay accounting keys on, so a SET without a usable one is rejected here rather than reaching a consumer that cannot track it.
public sealed class JwtIdPresenceStep : Abblix.SecurityEvents.Validation.ISecurityCriticalValidator, Abblix.SecurityEvents.Validation.ISecurityEventTokenValidatorInheritance System.Object → JwtIdPresenceStep
Implements ISecurityCriticalValidator, ISecurityEventTokenValidator
Methods
JwtIdPresenceStep.ValidateAsync(SecurityEventTokenValidationContext, CancellationToken) Method
Checks the token in flight.
public System.Threading.Tasks.ValueTask<Abblix.SecurityEvents.Validation.SecurityEventTokenValidationError?> ValidateAsync(Abblix.SecurityEvents.Validation.SecurityEventTokenValidationContext context, System.Threading.CancellationToken cancellationToken);Parameters
context SecurityEventTokenValidationContext
The state accumulated by earlier steps.
cancellationToken System.Threading.CancellationToken
Cancels I/O the step performs, such as key retrieval.
Implements ValidateAsync(SecurityEventTokenValidationContext, CancellationToken)
Returns
System.Threading.Tasks.ValueTask<SecurityEventTokenValidationError>
Null to pass the token on; an error to stop the pipeline with that verdict.