InitialAccessTokenRevocationProvider Class
Default implementation that checks revocation against RevokedInitialAccessTokenSubjects. For production use with large or dynamic revocation lists, replace with a database- or cache-backed implementation.
public class InitialAccessTokenRevocationProvider : Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Interfaces.IInitialAccessTokenRevocationProviderInheritance System.Object → InitialAccessTokenRevocationProvider
Implements IInitialAccessTokenRevocationProvider
Constructors
InitialAccessTokenRevocationProvider(IOptionsMonitor<OidcOptions>) Constructor
Default implementation that checks revocation against RevokedInitialAccessTokenSubjects. For production use with large or dynamic revocation lists, replace with a database- or cache-backed implementation.
public InitialAccessTokenRevocationProvider(Microsoft.Extensions.Options.IOptionsMonitor<Abblix.Oidc.Server.Common.Configuration.OidcOptions> options);Parameters
options Microsoft.Extensions.Options.IOptionsMonitor<OidcOptions>
OIDC configuration containing the set of revoked token identifiers.
Methods
InitialAccessTokenRevocationProvider.IsRevokedAsync(string) Method
Determines whether the initial access token with the specified identifier has been revoked.
public System.Threading.Tasks.Task<bool> IsRevokedAsync(string subject);Parameters
subject System.String
The unique identifier of the token (from the JWT subject claim).
Implements IsRevokedAsync(string)
Returns
System.Threading.Tasks.Task<System.Boolean>
A task that results in true if the token has been revoked, false otherwise.