IAccessTokenService Interface

Issues OAuth 2.0 access tokens as signed JWTs (RFC 9068 access-token format) and reverses the mapping by reconstructing the originating AuthSession and AuthorizationContext from the token's claims.

public interface IAccessTokenService

Methods

IAccessTokenService.AuthenticateByAccessTokenAsync(JsonWebToken, ClientInfo) Method

Asynchronously authenticates a user based on a provided access token.

System.Threading.Tasks.Task<Abblix.Utils.Result<Abblix.Oidc.Server.Endpoints.Token.Interfaces.AuthorizedGrant,Abblix.Oidc.Server.Common.OidcError>> AuthenticateByAccessTokenAsync(Abblix.Jwt.JsonWebToken accessToken, Abblix.Oidc.Server.Features.ClientInformation.ClientInfo clientInfo);

Parameters

accessToken JsonWebToken

The access token to authenticate.

clientInfo ClientInfo

The client the token was issued for; its sector opens a pairwise subject back to the real subject.

Returns

System.Threading.Tasks.Task<Abblix.Utils.Result<AuthorizedGrant,OidcError>>
A task that represents the asynchronous authentication operation. On success the result carries the AuthorizedGrant (the authenticated user's session and authorization context); it carries an OidcError when a pairwise subject cannot be opened for this client, so the caller rejects the token at the protocol level. This mirrors the result shape of the refresh and token-exchange recovery paths.

IAccessTokenService.CreateAccessTokenAsync(AuthSession, AuthorizationContext, ClientInfo) Method

Asynchronously creates a new access token based on the given authentication session, authorization context and client information.

System.Threading.Tasks.Task<Abblix.Oidc.Server.Features.Tokens.EncodedJsonWebToken> CreateAccessTokenAsync(Abblix.Oidc.Server.Features.UserAuthentication.AuthSession authSession, Abblix.Oidc.Server.Common.AuthorizationContext authContext, Abblix.Oidc.Server.Features.ClientInformation.ClientInfo clientInfo);

Parameters

authSession AuthSession

The authentication session containing user and session details.

authContext AuthorizationContext

The authorization context containing details about the granted permissions and scopes.

clientInfo ClientInfo

Information about the client for whom the token is being created.

Returns

System.Threading.Tasks.Task<EncodedJsonWebToken>
A task that represents the asynchronous create operation. The task result contains the newly created JsonWebToken.