Namespace SEBT.Portal.UseCases.Auth.CompleteOidcLogin

Classes

CompleteOidcLoginCommand: Completes an OIDC login or step-up: verifies the callback token against the pre-auth session, resolves the portal user, and mints the portal JWT.

Orchestrates OIDC login completion. Verifies the callback token was issued for the pre-auth session and has not been used before, resolves the portal user (existing-only for step-up; get-or-create for login), and mints the portal JWT. The session is consumed on the first advance — later failures intentionally leave it unusable.

Failure log entries derive their HttpStatus from OidcResultHttpStatus — the same table the API layer maps responses from — so the logged status is always the returned status.

CompleteOidcLoginResponse: Successful completion outcome.

Table of Contents

Namespace SEBT.Portal.UseCases.Auth.CompleteOidcLogin

Classes