Abblix.Oidc.Server.Model.AuthorizationRequest

AuthorizationRequest.Parameters Class

Wire-level parameter names accepted at the authorization endpoint per RFC 6749 §4.1.1, OpenID Connect Core 1.0 §3.1.2.1, RFC 7636 (PKCE), RFC 8707 (resource indicators), and RFC 9449 §10 (DPoP).

public static class AuthorizationRequest.Parameters

Inheritance System.Object → Parameters

Fields

AuthorizationRequest.Parameters.AcrValues Field

The acr_values authorization request parameter listing requested Authentication Context Class Reference values.

public const string AcrValues = "acr_values";

Field Value

System.String

AuthorizationRequest.Parameters.AuthorizationDetails Field

The authorization_details authorization request parameter (RFC 9396 §2) carrying a JSON array of structured authorization requirements per the RFC 9396 Rich Authorization Requests profile.

public const string AuthorizationDetails = "authorization_details";

Field Value

System.String

AuthorizationRequest.Parameters.Claims Field

The claims authorization request parameter carrying a structured request for specific claims to appear in the ID Token or UserInfo response.

public const string Claims = "claims";

Field Value

System.String

AuthorizationRequest.Parameters.ClaimsLocales Field

The claims_locales authorization request parameter listing preferred locales for localised claim values.

public const string ClaimsLocales = "claims_locales";

Field Value

System.String

AuthorizationRequest.Parameters.ClientId Field

The client_id authorization request parameter identifying the relying party.

public const string ClientId = "client_id";

Field Value

System.String

AuthorizationRequest.Parameters.CodeChallenge Field

The code_challenge PKCE parameter (RFC 7636 §4.3) derived from the client's code verifier.

public const string CodeChallenge = "code_challenge";

Field Value

System.String

AuthorizationRequest.Parameters.CodeChallengeMethod Field

The code_challenge_method PKCE parameter declaring how the code challenge was derived (S256, plain).

public const string CodeChallengeMethod = "code_challenge_method";

Field Value

System.String

AuthorizationRequest.Parameters.Display Field

The display authorization request parameter hinting how authentication and consent UI should be rendered.

public const string Display = "display";

Field Value

System.String

AuthorizationRequest.Parameters.DpopJkt Field

The dpop_jkt authorization request parameter (RFC 9449 §10) carrying the base64url-encoded JWK Thumbprint of the DPoP key the client will demonstrate at the token endpoint.

public const string DpopJkt = "dpop_jkt";

Field Value

System.String

AuthorizationRequest.Parameters.IdTokenHint Field

The id_token_hint authorization request parameter carrying a previously issued ID Token as a hint about the end-user.

public const string IdTokenHint = "id_token_hint";

Field Value

System.String

AuthorizationRequest.Parameters.LoginHint Field

The login_hint authorization request parameter suggesting the login identifier to pre-fill in the authentication UI.

public const string LoginHint = "login_hint";

Field Value

System.String

AuthorizationRequest.Parameters.MaxAge Field

The max_age authorization request parameter bounding the elapsed time since the last end-user authentication, in seconds.

public const string MaxAge = "max_age";

Field Value

System.String

AuthorizationRequest.Parameters.Nonce Field

The nonce authorization request parameter bound into the ID Token to prevent token replay.

public const string Nonce = "nonce";

Field Value

System.String

AuthorizationRequest.Parameters.Prompt Field

The prompt authorization request parameter controlling re-prompting for authentication and consent.

public const string Prompt = "prompt";

Field Value

System.String

AuthorizationRequest.Parameters.RedirectUri Field

The redirect_uri authorization request parameter naming the absolute URI to which the authorization response is delivered.

public const string RedirectUri = "redirect_uri";

Field Value

System.String

AuthorizationRequest.Parameters.Request Field

The request authorization request parameter carrying a Request Object as a JWT (OpenID Connect Core §6.1).

public const string Request = "request";

Field Value

System.String

AuthorizationRequest.Parameters.RequestUri Field

The request_uri authorization request parameter referencing a Request Object hosted at an HTTPS URL (OpenID Connect Core §6.2).

public const string RequestUri = "request_uri";

Field Value

System.String

AuthorizationRequest.Parameters.Resource Field

The resource authorization request parameter (RFC 8707) targeting a specific protected resource for the issued access token.

public const string Resource = "resource";

Field Value

System.String

AuthorizationRequest.Parameters.ResponseMode Field

The response_mode authorization request parameter selecting how the response is delivered to the redirect URI (query, fragment, form_post).

public const string ResponseMode = "response_mode";

Field Value

System.String

AuthorizationRequest.Parameters.ResponseType Field

The response_type authorization request parameter selecting the grant flow (e.g. code, token, id_token or combinations).

public const string ResponseType = "response_type";

Field Value

System.String

AuthorizationRequest.Parameters.Scope Field

The scope authorization request parameter listing requested OAuth/OIDC scopes.

public const string Scope = "scope";

Field Value

System.String

AuthorizationRequest.Parameters.State Field

The state authorization request parameter; an opaque value returned unchanged in the response for CSRF protection and correlation.

public const string State = "state";

Field Value

System.String

AuthorizationRequest.Parameters.UiLocales Field

The ui_locales authorization request parameter listing preferred UI locales as BCP 47 tags.

public const string UiLocales = "ui_locales";

Field Value

System.String