InitialAccessTokenValidator Class

Validates the initial access token on client registration requests per RFC 7591 Section 3 and RFC 6750 Bearer Token Usage. When RequireInitialAccessToken is enabled, checks JWT signature, expiration, type, and revocation status. Skipped for update operations and when the feature is disabled.

public class InitialAccessTokenValidator : Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.IClientRegistrationContextValidator

Inheritance System.Object → InitialAccessTokenValidator

Implements IClientRegistrationContextValidator

Constructors

InitialAccessTokenValidator(IAuthServiceJwtValidator, IInitialAccessTokenRevocationProvider, IOptionsMonitor<OidcOptions>) Constructor

public InitialAccessTokenValidator(Abblix.Oidc.Server.Features.Tokens.Validation.IAuthServiceJwtValidator jwtValidator, Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Interfaces.IInitialAccessTokenRevocationProvider revocationProvider, Microsoft.Extensions.Options.IOptionsMonitor<Abblix.Oidc.Server.Common.Configuration.OidcOptions> options);

Parameters

`jwtValidator` IAuthServiceJwtValidator

Validates JWT signature and expiration.

`revocationProvider` IInitialAccessTokenRevocationProvider

Checks whether the token has been revoked.

`options` Microsoft.Extensions.Options.IOptionsMonitor<OidcOptions >

OIDC configuration options.

Methods

InitialAccessTokenValidator.ValidateAsync(ClientRegistrationValidationContext) Method

Validates the slice of registration metadata this implementation owns. May mutate ClientRegistrationValidationContext with derived values (for example the resolved sector identifier).

public System.Threading.Tasks.Task<Abblix.Oidc.Server.Common.OidcError?> ValidateAsync(Abblix.Oidc.Server.Endpoints.DynamicClientManagement.Validation.ClientRegistrationValidationContext context);