WsFederationHandler Class

Creates a new WsFederationAuthenticationHandler

Creates a new WsFederationAuthenticationHandler

Gets the issuer that should be used when any claims are issued.

Gets the ISystemClock.

Gets or sets the HttpContext.

Gets the absolute current url.

The handler calls methods on the events which give the application control at certain points where processing is occurring. If it is not provided a default instance is supplied which does nothing when the methods are called.

Gets the ILogger.

Gets or sets the options associated with this authentication handler.

Gets the IOptionsMonitor<TOptions> to detect changes to options.

Gets the path as seen by the authentication middleware.

Gets the path base as seen by the authentication middleware.

Gets the HttpRequest associated with the current request.

Gets the HttpResponse associated with the current request.

Gets or sets the AuthenticationScheme associated with this authentication handler.

The authentication scheme used by default for signin.

Gets the current time, primarily for unit testing.

Gets the UrlEncoder.

Authenticate the current request.

Constructs an absolute url for the specified targetPath.

Challenge the current request.

Creates a new instance of the events instance.

Hook that is called when the response about to be sent

Forbid the current request.

Produces a cookie containing a nonce used to correlate the current remote authentication request.

Derived types may override this method to handle access denied errors.

Allows derived types to handle authentication.

Used to ensure HandleAuthenticateAsync is only invoked once. The subsequent calls will return the same authenticate result.

Used to ensure HandleAuthenticateAsync is only invoked once safely. The subsequent calls will return the same authentication result. Any exceptions will be converted into a failed authentication result containing the exception.

Handles Challenge

Override this method to handle Forbid.

Invoked to process incoming authentication messages.

Handles wsignoutcleanup1.0 messages sent to the RemoteSignOutPath

Overridden to handle remote signout requests

Override this method to deal with 401 challenge concerns, if an authentication scheme in question deals an authentication interaction as part of it's request flow. (like adding a response header, or changing the 401 result to 302 of a login page or external sign-in location.)

Initialize the handler, resolve the options and validate them.

Initialize is called once per request to contextualize this instance with appropriate state.

Initializes the events object, called once per request by InitializeAsync(AuthenticationScheme, HttpContext).

Called after options/events have been initialized for the handler to finish initializing itself.

Resolves the scheme that this authentication operation is forwarded to.

Gets a value that determines if the current authentication request should be handled by HandleRequestAsync().

Handles Signout

Validates that the current request correlates with the current remote authentication request.