Skip to content

ParseStep Class

Takes the compact serialization apart and parses its header and claims, WITHOUT trusting either: parsing establishes shape, and everything read here stays in the context's unverified half until the signature step speaks.

C#
public sealed class ParseStep : Abblix.SecurityEvents.Validation.ISecurityEventTokenValidator

Inheritance System.Object → ParseStep

Implements ISecurityEventTokenValidator

Remarks

Parsing before signature verification is what lets the cheap rejections - wrong type, wrong issuer, present "exp" - run before any cryptography, and it is safe exactly because nothing acts on the parsed values beyond rejecting the token. Encrypted SETs are not supported by this version: none of the first consumers encrypts, and JWS-only keeps the parse step free of key material. A five-segment token reports that plainly rather than as a generic parse failure.

Methods

ParseStep.ValidateAsync(SecurityEventTokenValidationContext, CancellationToken) Method

Checks the token in flight.

C#
public System.Threading.Tasks.ValueTask<Abblix.SecurityEvents.Validation.SecurityEventTokenValidationError?> ValidateAsync(Abblix.SecurityEvents.Validation.SecurityEventTokenValidationContext context, System.Threading.CancellationToken cancellationToken);

Parameters

context SecurityEventTokenValidationContext

The state accumulated by earlier steps.

cancellationToken System.Threading.CancellationToken

Cancels I/O the step performs, such as key retrieval.

Implements ValidateAsync(SecurityEventTokenValidationContext, CancellationToken)

Returns

System.Threading.Tasks.ValueTask<SecurityEventTokenValidationError>
Null to pass the token on; an error to stop the pipeline with that verdict.