StreamIssuerStep Class

Binds each event to the stream it arrived on: the "iss" claim must equal the Stream Configuration's issuer (SSF 1.0 Section 4.1.6). Without this binding a token from any trusted issuer would be accepted on any stream, and events could be replayed across streams whose issuers differ.

public sealed class StreamIssuerStep : Abblix.SecurityEvents.Validation.ISecurityCriticalValidator, Abblix.SecurityEvents.Validation.ISecurityEventTokenValidator

Inheritance System.Object → StreamIssuerStep

Implements Abblix.SecurityEvents.Validation.ISecurityCriticalValidator, Abblix.SecurityEvents.Validation.ISecurityEventTokenValidator

Remarks

Section 4.1.6 names two values to match - the Stream Configuration's "iss" and the issuer the Transmitter Configuration was requested from. The receiver proved those equal when it accepted the stream (Sections 7.2.2, 8.1.1.1), so the single comparison here carries both halves of the rule; see StreamIssuer.

Methods

StreamIssuerStep.ValidateAsync(SecurityEventTokenValidationContext, CancellationToken) Method

Checks the token in flight.

public System.Threading.Tasks.ValueTask<Abblix.SecurityEvents.Validation.SecurityEventTokenValidationError?> ValidateAsync(Abblix.SecurityEvents.Validation.SecurityEventTokenValidationContext context, System.Threading.CancellationToken cancellationToken);