Namespace SEBT.Portal.UseCases.Auth.OidcCallback

Classes

OidcCallbackCommand

Completes the OIDC authorization-code callback: validates the pre-auth session, exchanges the code for a verified callback token, and advances the session.

OidcCallbackCommandHandler

Orchestrates the server-side OIDC callback. Validates state against the stored pre-auth session value, uses the stored code_verifier for the token exchange (never from the browser), and advances the session to CallbackCompleted. The stateCode and isStepUp values are read from the session — the command only carries code, state, and the session id.

Failure log entries derive their HttpStatus from OidcResultHttpStatus — the same table the API layer maps responses from — so the logged status is always the returned status.

OidcCallbackResponse

Successful callback outcome.