Namespace SEBT.Portal.Api.Controllers.Auth

Classes

AuthController

Controller for handling authorization status checks, token refresh, and logout. The portal JWT is stored in an HttpOnly cookie (see AuthCookies); endpoints that issue a new session write to the cookie and return non-sensitive metadata only.

OidcController

OIDC endpoints for external IdP login and step-up. Primary config uses flat Oidc keys (DiscoveryEndpoint, ClientId, CallbackRedirectUri); optional Oidc:StepUp:* selects a second client for elevated verification when stepUp=true on the config endpoint.

The controller owns PKCE generation, cookies, and HTTP mapping; the callback and complete-login business orchestration lives in UseCases handlers.