SignatureStep Class
Verifies the token's signature and, on success, promotes the claims from parsed shape to the issuer's words: this is the step that sets the context's validated token, which every step reading trusted claims requires.
public sealed class SignatureStep : Abblix.SecurityEvents.Validation.ISecurityCriticalValidator, Abblix.SecurityEvents.Validation.ISecurityEventTokenValidatorInheritance System.Object → SignatureStep
Implements ISecurityCriticalValidator, ISecurityEventTokenValidator
Remarks
The verification itself lives behind ISecurityEventTokenVerifier, which owns key resolution and the algorithm allowlist and hands back the verified token against the exact bytes received - RFC 8417 Section 5.1: unless integrity is ensured by other means, a SET "MUST be signed using JWS by an issuer that is trusted to do so for the use case".
Constructors
SignatureStep(ISecurityEventTokenVerifier) Constructor
Verifies the token's signature and, on success, promotes the claims from parsed shape to the issuer's words: this is the step that sets the context's validated token, which every step reading trusted claims requires.
public SignatureStep(Abblix.SecurityEvents.Abstractions.ISecurityEventTokenVerifier verifier);Parameters
verifier ISecurityEventTokenVerifier
The bridge to the host's cryptography.
Remarks
The verification itself lives behind ISecurityEventTokenVerifier, which owns key resolution and the algorithm allowlist and hands back the verified token against the exact bytes received - RFC 8417 Section 5.1: unless integrity is ensured by other means, a SET "MUST be signed using JWS by an issuer that is trusted to do so for the use case".
Methods
SignatureStep.ValidateAsync(SecurityEventTokenValidationContext, CancellationToken) Method
Checks the token in flight.
public System.Threading.Tasks.ValueTask<Abblix.SecurityEvents.Validation.SecurityEventTokenValidationError?> ValidateAsync(Abblix.SecurityEvents.Validation.SecurityEventTokenValidationContext context, System.Threading.CancellationToken cancellationToken);Parameters
context SecurityEventTokenValidationContext
The state accumulated by earlier steps.
cancellationToken System.Threading.CancellationToken
Cancels I/O the step performs, such as key retrieval.
Implements ValidateAsync(SecurityEventTokenValidationContext, CancellationToken)
Returns
System.Threading.Tasks.ValueTask<SecurityEventTokenValidationError>
Null to pass the token on; an error to stop the pipeline with that verdict.