Class OidcCallbackRequest

Namespace

SEBT.Portal.Api.Models

Assembly

SEBT.Portal.Api.dll

request body for the server-side OIDC callback endpoint. The code_verifier and redirect_uri are never accepted from the client — they are read from the pre-auth session stored server-side. The browser only sends the authorization code and metadata needed to match the session.

public record OidcCallbackRequest

Inheritance

object

OidcCallbackRequest

Constructors

OidcCallbackRequest(string?, string?, string?, bool)

request body for the server-side OIDC callback endpoint. The code_verifier and redirect_uri are never accepted from the client — they are read from the pre-auth session stored server-side. The browser only sends the authorization code and metadata needed to match the session.

public OidcCallbackRequest(string? Code, string? State, string? StateCode, bool IsStepUp = false)

Parameters

Code string

State string

StateCode string

IsStepUp bool

Properties

Code

[JsonPropertyName("code")]
public string? Code { get; init; }

Property Value

string

IsStepUp

[JsonPropertyName("isStepUp")]
public bool IsStepUp { get; init; }

Property Value

bool

State

[JsonPropertyName("state")]
public string? State { get; init; }

Property Value

string

StateCode

[JsonPropertyName("stateCode")]
public string? StateCode { get; init; }

Property Value

string