Authlete
|
Request to Authlete's /api/backchannel/authentication
API.
More...
Properties | |
string | Parameters [get, set] |
Backchannel authentication request parameters which the backchannel authentication endpoint of the authorization server implementation received from a client application. More... | |
string | ClientId [get, set] |
The client ID extracted from the Authorization header of a backchannel authentication request from a client application. More... | |
string | ClientSecret [get, set] |
The client secret extracted from the Authorization header of the backchannel authentication request from the client application. More... | |
string | ClientCertificate [get, set] |
The client certificate used in the TLS connection between the client application and the backchannel authentication endpoint of the authorization server. More... | |
string[] | ClientCertificatePath [get, set] |
The certificate path presented by the client during client authentication. More... | |
Request to Authlete's /api/backchannel/authentication
API.
When the implementation of the backchannel authentication endpoint of the authorization server receives a backchannel authentication request from a client application, the first step is to call Authlete's /api/backchannel/authentication
API. The API will parse the backchannel authentication request on behalf of the implementation of the backchannel authentication endpoint.
Since version 1.3.0.
|
getset |
The client certificate used in the TLS connection between the client application and the backchannel authentication endpoint of the authorization server.
|
getset |
The certificate path presented by the client during client authentication.
Each element in the array is a certificate in PEM format.
|
getset |
The client ID extracted from the Authorization
header of a backchannel authentication request from a client application.
If the backchannel authentication endpoint of the authorization server supports Basic Authentication as a means of client authentication, and if the request from the client application contained its client ID in the Authorization
header, the value should be extracted from there and set as the value of this request parameter.
|
getset |
The client secret extracted from the Authorization
header of the backchannel authentication request from the client application.
If the backchannel authentication endpoint of the authorization server supports Basic Authentication as a means of client authentication, and if the request from the client application contained its client secret in the Authorization
header, the value should be extracted from there and set as the value of this request parameter.
|
getset |
Backchannel authentication request parameters which the backchannel authentication endpoint of the authorization server implementation received from a client application.
The value of this property should be the entire request body (which is formatted in application/x-www-form-urlencoded
) of the request from the client application.