12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439 |
- <?xml version="1.0"?>
- <doc>
- <assembly>
- <name>System.IdentityModel.Tokens.Jwt</name>
- </assembly>
- <members>
- <member name="T:System.IdentityModel.Tokens.Jwt.ClaimTypeMapping">
- <summary>
- Defines the inbound and outbound mapping for claim claim types from jwt to .net claim
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.ClaimTypeMapping.#cctor">
- <summary>
- Initializes static members of the <see cref="T:System.IdentityModel.Tokens.Jwt.ClaimTypeMapping"/> class.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.ClaimTypeMapping.InboundClaimTypeMap">
- <summary>
- Gets the InboundClaimTypeMap used by JwtSecurityTokenHandler when producing claims from jwt.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.ClaimTypeMapping.OutboundClaimTypeMap">
- <summary>
- Gets the OutboundClaimTypeMap is used by JwtSecurityTokenHandler to shorten claim types when creating a jwt.
- </summary>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JsonClaimValueTypes">
- <summary>
- Constants for Json Web tokens.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JsonClaimValueTypes.Json">
- <summary>
- A URI that represents the JSON XML data type.
- </summary>
- <remarks>When mapping json to .Net Claim(s), if the value was not a string (or an enumeration of strings), the ClaimValue will serialized using the current JSON serializer, a property will be added with the .Net type and the ClaimTypeValue will be set to 'JsonClaimValueType'.</remarks>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JsonClaimValueTypes.JsonArray">
- <summary>
- A URI that represents the JSON array XML data type.
- </summary>
- <remarks>When mapping json to .Net Claim(s), if the value was not a string (or an enumeration of strings), the ClaimValue will serialized using the current JSON serializer, a property will be added with the .Net type and the ClaimTypeValue will be set to 'JsonClaimValueType'.</remarks>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JsonClaimValueTypes.JsonNull">
- <summary>
- A URI that represents the JSON null data type
- </summary>
- <remarks>When mapping json to .Net Claim(s), we use empty string to represent the claim value and set the ClaimValueType to JsonNull</remarks>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.Serializer">
- <summary>
- Delegate that can be set on <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to control serialization of objects into JSON.
- </summary>
- <param name="obj">Object to serialize</param>
- <returns>The serialized object.</returns>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.Deserializer">
- <summary>
- Delegate that can be set on <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to control deserialization JSON into objects.
- </summary>
- <param name="obj">JSON to deserialize.</param>
- <param name="targetType">Type expected.</param>
- <returns>The deserialized object.</returns>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JsonExtensions">
- <summary>
- Dictionary extensions for serializations
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer">
- <summary>
- Gets or sets a <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to use when serializing objects to JSON.
- </summary>
- <exception cref="T:System.ArgumentNullException">If 'value' is null.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer">
- <summary>
- Gets or sets a <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to use when deserializing objects from JSON.
- </summary>
- <exception cref="T:System.ArgumentNullException">If 'value' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JsonExtensions.SerializeToJson(System.Object)">
- <summary>
- Serializes an object to JSON.
- </summary>
- <param name="value">The object to serialize</param>
- <returns>The object as JSON.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JsonExtensions.DeserializeFromJson``1(System.String)">
- <summary>
- Deserialzes JSON into an instance of type T.
- </summary>
- <typeparam name="T">The object type.</typeparam>
- <param name="jsonString">The JSON to deserialze.</param>
- <returns>A new instance of type T.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JsonExtensions.DeserializeJwtHeader(System.String)">
- <summary>
- Deserialzes JSON into an instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.
- </summary>
- <param name="jsonString">The JSON to deserialze.</param>
- <returns>A new instance <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JsonExtensions.DeserializeJwtPayload(System.String)">
- <summary>
- Deserialzes JSON into an instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>.
- </summary>
- <param name="jsonString">The JSON to deserialze.</param>
- <returns>A new instance <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>.</returns>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtConstants">
- <summary>
- Constants for Json Web tokens.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.HeaderType">
- <summary>
- Short header type.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.HeaderTypeAlt">
- <summary>
- Long header type.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.TokenType">
- <summary>
- Short token type.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.TokenTypeAlt">
- <summary>
- Long token type.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.JsonCompactSerializationRegex">
- <summary>
- JWS - Token format: 'header.payload.signature'. Signature is optional, but '.' is required.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.JweCompactSerializationRegex">
- <summary>
- JWE - Token format: 'protectedheader.encryptedkey.iv.cyphertext.authenticationtag'.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.JweSegmentCount">
- <summary>
- The number of parts in a JWE token.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.JwsSegmentCount">
- <summary>
- The number of parts in a JWS token.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.MaxJwtSegmentCount">
- <summary>
- The maximum number of parts in a JWT.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtConstants.DirectKeyUseAlg">
- <summary>
- JWE header alg indicating a shared symmetric key is directly used as CEK.
- </summary>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtHeader">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> which contains JSON objects representing the cryptographic operations applied to the JWT and optionally any additional properties of the JWT.
- The member names within the JWT Header are referred to as Header Parameter Names.
- <para>These names MUST be unique and the values must be <see cref="T:System.String"/>(s). The corresponding values are referred to as Header Parameter Values.</para>
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> class. Default string comparer <see cref="P:System.StringComparer.Ordinal"/>.
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor(Microsoft.IdentityModel.Tokens.SigningCredentials)">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.
- With the Header Parameters:
- <para>{ { typ, JWT }, { alg, SigningCredentials.Algorithm } }</para>
- </summary>
- <param name="signingCredentials"><see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.SigningCredentials"/> used creating a JWS Compact JSON.</param>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor(Microsoft.IdentityModel.Tokens.EncryptingCredentials)">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.
- With the Header Parameters:
- <para>{ { typ, JWT }, { alg, EncryptingCredentials.Alg }, { enc, EncryptingCredentials.Enc } }</para>
- </summary>
- <param name="encryptingCredentials"><see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.EncryptingCredentials"/> used creating a JWE Compact JSON.</param>
- <exception cref="T:System.ArgumentNullException">If 'encryptingCredentials' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor(Microsoft.IdentityModel.Tokens.SigningCredentials,System.Collections.Generic.IDictionary{System.String,System.String})">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.
- With the Header Parameters:
- <para>{ { typ, JWT }, { alg, SigningCredentials.Algorithm } }</para>
- </summary>
- <param name="signingCredentials"><see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.SigningCredentials"/> used when creating a JWS Compact JSON.</param>
- <param name="outboundAlgorithmMap">provides a mapping for the 'alg' value so that values are within the JWT namespace.</param>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor(Microsoft.IdentityModel.Tokens.EncryptingCredentials,System.Collections.Generic.IDictionary{System.String,System.String})">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.
- With the Header Parameters:
- <para>{ { typ, JWT }, { alg, SigningCredentials.Algorithm } }</para>
- </summary>
- <param name="encryptingCredentials"><see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.EncryptingCredentials"/> used when creating a JWS Compact JSON.</param>
- <param name="outboundAlgorithmMap">provides a mapping for the 'alg' value so that values are within the JWT namespace.</param>
- <exception cref="T:System.ArgumentNullException">If 'signingCredentials' is null.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Alg">
- <summary>
- Gets the signature algorithm that was used to create the signature.
- </summary>
- <remarks>If the signature algorithm is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Cty">
- <summary>
- Gets the content mime type (Cty) of the token.
- </summary>
- <remarks>If the content mime type is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Enc">
- <summary>
- Gets the encryption algorithm (Enc) of the token.
- </summary>
- <remarks>If the content mime type is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.EncryptingCredentials">
- <summary>
- Gets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.EncryptingCredentials"/> passed in the constructor.
- </summary>
- <remarks>This value may be null.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.IV">
- <summary>
- Gets the iv of symmetric key wrap.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Kid">
- <summary>
- Gets the key identifier for the security key used to sign the token
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.SigningCredentials">
- <summary>
- Gets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtHeader.SigningCredentials"/> passed in the constructor.
- </summary>
- <remarks>This value may be null.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Typ">
- <summary>
- Gets the mime type (Typ) of the token.
- </summary>
- <remarks>If the mime type is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.X5t">
- <summary>
- Gets the thumbprint of the certificate used to sign the token
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtHeader.Zip">
- <summary>
- Gets the 'value' of the 'zip' claim { zip, 'value' }.
- </summary>
- <remarks>If the 'zip' claim is not found, null is returned.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.Base64UrlDeserialize(System.String)">
- <summary>
- Deserializes Base64UrlEncoded JSON into a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> instance.
- </summary>
- <param name="base64UrlEncodedJsonString">Base64url encoded JSON to deserialize.</param>
- <returns>An instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.Base64UrlEncode">
- <summary>
- Encodes this instance as Base64UrlEncoded JSON.
- </summary>
- <returns>Base64UrlEncoded JSON.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.Deserialize(System.String)">
- <summary>
- Deserialzes JSON into a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> instance.
- </summary>
- <param name="jsonString"> The JSON to deserialize.</param>
- <returns>An instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/>.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.GetStandardClaim(System.String)">
- <summary>
- Gets a standard claim from the header.
- A standard claim is either a string or a value of another type serialized in JSON format.
- </summary>
- <param name="claimType">The key of the claim.</param>
- <returns>The standard claim string; or null if not found.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtHeader.SerializeToJson">
- <summary>
- Serializes this instance to JSON.
- </summary>
- <returns>This instance as JSON.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames">
- <summary>
- List of header parameter names see: http://tools.ietf.org/html/rfc7519#section-5.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Alg">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.1
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Cty">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.10
- also:https://tools.ietf.org/html/rfc7519#section-5.2
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Enc">
- <summary>
- see:https://tools.ietf.org/html/rfc7516#section-4.1.2
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.IV">
- <summary>
- see:https://tools.ietf.org/html/rfc7518#section-4.7.1.1
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Jku">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.2
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Jwk">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.3
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Kid">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Typ">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.9
- also:https://tools.ietf.org/html/rfc7519#section-5.1
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.X5c">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.6
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.X5t">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#page-12
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.X5u">
- <summary>
- see:https://tools.ietf.org/html/rfc7515#section-4.1.5
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtHeaderParameterNames.Zip">
- <summary>
- see:https://tools.ietf.org/html/rfc7516#section-4.1.3
- </summary>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtPayload">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> which contains JSON objects representing the claims contained in the JWT. Each claim is a JSON object of the form { Name, Value }.
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.#ctor">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> class with no claims. Default string comparer <see cref="P:System.StringComparer.Ordinal"/>.
- Creates a empty <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.#ctor(System.Collections.Generic.IEnumerable{System.Security.Claims.Claim})">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> class with <see cref="T:System.Collections.Generic.IEnumerable`1"/>. Default string comparer <see cref="P:System.StringComparer.Ordinal"/>.
- <param name="claims">The claims to add.</param>
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.#ctor(System.String,System.String,System.Collections.Generic.IEnumerable{System.Security.Claims.Claim},System.Nullable{System.DateTime},System.Nullable{System.DateTime})">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> class with claims added for each parameter specified. Default string comparer <see cref="P:System.StringComparer.Ordinal"/>.
- </summary>
- <param name="issuer">If this value is not null, a { iss, 'issuer' } claim will be added.</param>
- <param name="audience">If this value is not null, a { aud, 'audience' } claim will be added</param>
- <param name="claims">If this value is not null then for each <see cref="T:System.Security.Claims.Claim"/> a { 'Claim.Type', 'Claim.Value' } is added. If duplicate claims are found then a { 'Claim.Type', List<object> } will be created to contain the duplicate values.</param>
- <param name="notBefore">If notbefore.HasValue is 'true' a { nbf, 'value' } claim is added.</param>
- <param name="expires">If expires.HasValue is 'true' a { exp, 'value' } claim is added.</param>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.#ctor(System.String,System.String,System.Collections.Generic.IEnumerable{System.Security.Claims.Claim},System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.Nullable{System.DateTime})">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> class with claims added for each parameter specified. Default string comparer <see cref="P:System.StringComparer.Ordinal"/>.
- </summary>
- <param name="issuer">If this value is not null, a { iss, 'issuer' } claim will be added.</param>
- <param name="audience">If this value is not null, a { aud, 'audience' } claim will be added</param>
- <param name="claims">If this value is not null then for each <see cref="T:System.Security.Claims.Claim"/> a { 'Claim.Type', 'Claim.Value' } is added. If duplicate claims are found then a { 'Claim.Type', List<object> } will be created to contain the duplicate values.</param>
- <param name="notBefore">If notbefore.HasValue is 'true' a { nbf, 'value' } claim is added.</param>
- <param name="expires">If expires.HasValue is 'true' a { exp, 'value' } claim is added.</param>
- <param name="issuedAt">If issuedAt.HasValue is 'true' a { iat, 'value' } claim is added.</param>
- <remarks>Comparison is set to <see cref="P:System.StringComparer.Ordinal"/>
- <para>The 4 parameters: 'issuer', 'audience', 'notBefore', 'expires' take precednece over <see cref="T:System.Security.Claims.Claim"/>(s) in 'claims'. The values in 'claims' will be overridden.</para></remarks>
- <exception cref="T:System.ArgumentException">If 'expires' <= 'notbefore'.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Actort">
- <summary>
- Gets the 'value' of the 'actor' claim { actort, 'value' }.
- </summary>
- <remarks>If the 'actor' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Acr">
- <summary>
- Gets the 'value' of the 'acr' claim { acr, 'value' }.
- </summary>
- <remarks>If the 'acr' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Amr">
- <summary>
- Gets the 'value' of the 'amr' claim { amr, 'value' } as list of strings.
- </summary>
- <remarks>If the 'amr' claim is not found, an empty enumerable is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.AuthTime">
- <summary>
- Gets the 'value' of the 'auth_time' claim { auth_time, 'value' }.
- </summary>
- <remarks>If the 'auth_time' claim is not found OR could not be converted to <see cref="T:System.Int32"/>, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Aud">
- <summary>
- Gets the 'value' of the 'audience' claim { aud, 'value' } as a list of strings.
- </summary>
- <remarks>If the 'audience' claim is not found, an empty enumerable is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Azp">
- <summary>
- Gets the 'value' of the 'azp' claim { azp, 'value' }.
- </summary>
- <remarks>If the 'azp' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.CHash">
- <summary>
- Gets 'value' of the 'c_hash' claim { c_hash, 'value' }.
- </summary>
- <remarks>If the 'c_hash' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Exp">
- <summary>
- Gets the 'value' of the 'expiration' claim { exp, 'value' }.
- </summary>
- <remarks>If the 'expiration' claim is not found OR could not be converted to <see cref="T:System.Int32"/>, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Jti">
- <summary>
- Gets the 'value' of the 'JWT ID' claim { jti, 'value' }.
- </summary>
- <remarks>If the 'JWT ID' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Iat">
- <summary>
- Gets the 'value' of the 'Issued At' claim { iat, 'value' }.
- </summary>
- <remarks>If the 'Issued At' claim is not found OR cannot be converted to <see cref="T:System.Int32"/> null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Iss">
- <summary>
- Gets the 'value' of the 'issuer' claim { iss, 'value' }.
- </summary>
- <remarks>If the 'issuer' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Nbf">
- <summary>
- Gets the 'value' of the 'expiration' claim { nbf, 'value' }.
- </summary>
- <remarks>If the 'notbefore' claim is not found OR could not be converted to <see cref="T:System.Int32"/>, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Nonce">
- <summary>
- Gets the 'value' of the 'nonce' claim { nonce, 'value' }.
- </summary>
- <remarks>If the 'nonce' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Sub">
- <summary>
- Gets the 'value' of the 'subject' claim { sub, 'value' }.
- </summary>
- <remarks>If the 'subject' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.ValidFrom">
- <summary>
- Gets the 'value' of the 'notbefore' claim { nbf, 'value' } converted to a <see cref="T:System.DateTime"/> assuming 'value' is seconds since UnixEpoch (UTC 1970-01-01T0:0:0Z).
- </summary>
- <remarks>If the 'notbefore' claim is not found, then <see cref="F:System.DateTime.MinValue"/> is returned. Time is returned as UTC.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.ValidTo">
- <summary>
- Gets the 'value' of the 'expiration' claim { exp, 'value' } converted to a <see cref="T:System.DateTime"/> assuming 'value' is seconds since UnixEpoch (UTC 1970-01-01T0:0:0Z).
- </summary>
- <remarks>If the 'expiration' claim is not found, then <see cref="F:System.DateTime.MinValue"/> is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Claims">
- <summary>
- Gets a <see cref="T:System.Collections.Generic.IEnumerable`1"/><see cref="T:System.Security.Claims.Claim"/> for each JSON { name, value }.
- </summary>
- <remarks>Each <see cref="T:System.Security.Claims.Claim"/>(s) returned will have the <see cref="P:System.Security.Claims.Claim.Type"/> translated according to the mapping found in <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/>. Adding and removing to <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/> will affect the value of the <see cref="P:System.Security.Claims.Claim.Type"/>.
- <para><see cref="P:System.Security.Claims.Claim.Issuer"/> and <see cref="P:System.Security.Claims.Claim.OriginalIssuer"/> will be set to the value of <see cref="P:System.IdentityModel.Tokens.Jwt.JwtPayload.Iss"/> ( <see cref="F:System.String.Empty"/> if null).</para></remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.AddClaim(System.Security.Claims.Claim)">
- <summary>
- Adds a JSON object representing the <see cref="T:System.Security.Claims.Claim"/> to the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>
- </summary>
- <param name="claim">{ 'Claim.Type', 'Claim.Value' } is added. If a JSON object is found with the name == <see cref="P:System.Security.Claims.Claim.Type"/> then a { 'Claim.Type', List<object> } will be created to contain the duplicate values.</param>
- <remarks>See <see cref="M:System.IdentityModel.Tokens.Jwt.JwtPayload.AddClaims(System.Collections.Generic.IEnumerable{System.Security.Claims.Claim})"/> For details on how <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> is applied.</remarks>
- <exception cref="T:System.ArgumentNullException">'claim' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.AddClaims(System.Collections.Generic.IEnumerable{System.Security.Claims.Claim})">
- <summary>
- Adds a number of <see cref="T:System.Security.Claims.Claim"/> to the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> as JSON { name, value } pairs.
- </summary>
- <param name="claims">For each <see cref="T:System.Security.Claims.Claim"/> a JSON pair { 'Claim.Type', 'Claim.Value' } is added. If duplicate claims are found then a { 'Claim.Type', List<object> } will be created to contain the duplicate values.</param>
- <remarks>
- <para>Any <see cref="T:System.Security.Claims.Claim"/> in the <see cref="T:System.Collections.Generic.IEnumerable`1"/> that is null, will be ignored.</para></remarks>
- <exception cref="T:System.ArgumentNullException">'claims' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.GetDateTime(System.String)">
- <summary>
- Gets the DateTime using the number of seconds from 1970-01-01T0:0:0Z (UTC)
- </summary>
- <param name="key">Claim in the payload that should map to an integer.</param>
- <remarks>If the claim is not found, the function returns: DateTime.MinValue
- </remarks>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenException">If an overflow exception is thrown by the runtime.</exception>
- <returns>The DateTime representation of a claim.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.SerializeToJson">
- <summary>
- Serializes this instance to JSON.
- </summary>
- <returns>This instance as JSON.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.Base64UrlEncode">
- <summary>
- Encodes this instance as Base64UrlEncoded JSON.
- </summary>
- <returns>Base64UrlEncoded JSON.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Serializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.Base64UrlDeserialize(System.String)">
- <summary>
- Deserializes Base64UrlEncoded JSON into a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> instance.
- </summary>
- <param name="base64UrlEncodedJsonString">base64url encoded JSON to deserialize.</param>
- <returns>An instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtPayload.Deserialize(System.String)">
- <summary>
- Deserialzes JSON into a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> instance.
- </summary>
- <param name="jsonString">The JSON to deserialize.</param>
- <returns>An instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>.</returns>
- <remarks>Use <see cref="P:System.IdentityModel.Tokens.Jwt.JsonExtensions.Deserializer"/> to customize JSON serialization.</remarks>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames">
- <summary>
- List of registered claims from different sources
- http://tools.ietf.org/html/rfc7519#section-4
- http://openid.net/specs/openid-connect-core-1_0.html#IDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Actort">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Acr">
- <summary>
- http://openid.net/specs/openid-connect-core-1_0.html#IDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Amr">
- <summary>
- http://openid.net/specs/openid-connect-core-1_0.html#IDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Aud">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.AuthTime">
- <summary>
- http://openid.net/specs/openid-connect-core-1_0.html#IDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Azp">
- <summary>
- http://openid.net/specs/openid-connect-core-1_0.html#IDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Birthdate">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.CHash">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.AtHash">
- <summary>
- http://openid.net/specs/openid-connect-core-1_0.html#CodeIDToken
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Email">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Exp">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Gender">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.FamilyName">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.GivenName">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Iat">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Iss">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Jti">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.NameId">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Nonce">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Nbf">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Prn">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Sid">
- <summary>
- http://openid.net/specs/openid-connect-frontchannel-1_0.html#OPLogout
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Sub">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Typ">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.UniqueName">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtRegisteredClaimNames.Website">
- <summary>
- http://tools.ietf.org/html/rfc7519#section-4
- </summary>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken">
- <summary>
- A <see cref="T:Microsoft.IdentityModel.Tokens.SecurityToken"/> designed for representing a JSON Web Token (JWT).
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)">
- <summary>
- Initializes a new instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> from a string in JWS Compact serialized format.
- </summary>
- <param name="jwtEncodedString">A JSON Web Token that has been serialized in JWS Compact serialized format.</param>
- <exception cref="T:System.ArgumentNullException">'jwtEncodedString' is null.</exception>
- <exception cref="T:System.ArgumentException">'jwtEncodedString' contains only whitespace.</exception>
- <exception cref="T:System.ArgumentException">'jwtEncodedString' is not in JWS Compact serialized format.</exception>
- <remarks>
- The contents of this <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> have not been validated, the JSON Web Token is simply decoded. Validation can be accomplished using <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters,Microsoft.IdentityModel.Tokens.SecurityToken@)"/>
- </remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> class where the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> contains the crypto algorithms applied to the encoded <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> and <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>. The jwtEncodedString is the result of those operations.
- </summary>
- <param name="header">Contains JSON objects representing the cryptographic operations applied to the JWT and optionally any additional properties of the JWT</param>
- <param name="payload">Contains JSON objects representing the claims contained in the JWT. Each claim is a JSON object of the form { Name, Value }</param>
- <param name="rawHeader">base64urlencoded JwtHeader</param>
- <param name="rawPayload">base64urlencoded JwtPayload</param>
- <param name="rawSignature">base64urlencoded JwtSignature</param>
- <exception cref="T:System.ArgumentNullException">'header' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'payload' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'rawSignature' is null.</exception>
- <exception cref="T:System.ArgumentException">'rawHeader' or 'rawPayload' is null or whitespace.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtSecurityToken,System.String,System.String,System.String,System.String,System.String)">
- <summary>
- Initializes an instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> where the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> contains the crypto algorithms applied to the innerToken <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="header">Defines cryptographic operations applied to the 'innerToken'.</param>
- <param name="innerToken"></param>
- <param name="rawEncryptedKey">base64urlencoded key</param>
- <param name="rawHeader">base64urlencoded JwtHeader</param>
- <param name="rawInitializationVector">base64urlencoded initialization vector.</param>
- <param name="rawCiphertext">base64urlencoded encrypted innerToken</param>
- <param name="rawAuthenticationTag">base64urlencoded authentication tag.</param>
- <exception cref="T:System.ArgumentNullException">'header' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'innerToken' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'rawHeader' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'rawEncryptedKey' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'rawInitialVector' is null or empty.</exception>
- <exception cref="T:System.ArgumentNullException">'rawCiphertext' is null or empty.</exception>
- <exception cref="T:System.ArgumentNullException">'rawAuthenticationTag' is null or empty.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload)">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> class where the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> contains the crypto algorithms applied to the encoded <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> and <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>. The jwtEncodedString is the result of those operations.
- </summary>
- <param name="header">Contains JSON objects representing the cryptographic operations applied to the JWT and optionally any additional properties of the JWT</param>
- <param name="payload">Contains JSON objects representing the claims contained in the JWT. Each claim is a JSON object of the form { Name, Value }</param>
- <exception cref="T:System.ArgumentNullException">'header' is null.</exception>
- <exception cref="T:System.ArgumentNullException">'payload' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String,System.String,System.Collections.Generic.IEnumerable{System.Security.Claims.Claim},System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SigningCredentials)">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> class specifying optional parameters.
- </summary>
- <param name="issuer">If this value is not null, a { iss, 'issuer' } claim will be added.</param>
- <param name="audience">If this value is not null, a { aud, 'audience' } claim will be added</param>
- <param name="claims">If this value is not null then for each <see cref="T:System.Security.Claims.Claim"/> a { 'Claim.Type', 'Claim.Value' } is added. If duplicate claims are found then a { 'Claim.Type', List<object> } will be created to contain the duplicate values.</param>
- <param name="expires">If expires.HasValue a { exp, 'value' } claim is added.</param>
- <param name="notBefore">If notbefore.HasValue a { nbf, 'value' } claim is added.</param>
- <param name="signingCredentials">The <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials"/> that will be used to sign the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>. See <see cref="M:System.IdentityModel.Tokens.Jwt.JwtHeader.#ctor(Microsoft.IdentityModel.Tokens.SigningCredentials)"/> for details pertaining to the Header Parameter(s).</param>
- <exception cref="T:System.ArgumentException">If 'expires' <= 'notbefore'.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Actor">
- <summary>
- Gets the 'value' of the 'actor' claim { actort, 'value' }.
- </summary>
- <remarks>If the 'actor' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Audiences">
- <summary>
- Gets the list of 'audience' claim { aud, 'value' }.
- </summary>
- <remarks>If the 'audience' claim is not found, enumeration will be empty.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Claims">
- <summary>
- Gets the <see cref="T:System.Security.Claims.Claim"/>(s) for this token.
- If this is a JWE token, this property only returns the encrypted claims;
- the unencrypted claims should be read from the header seperately.
- </summary>
- <remarks><para><see cref="T:System.Security.Claims.Claim"/>(s) returned will NOT have the <see cref="P:System.Security.Claims.Claim.Type"/> translated according to <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/></para></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncodedHeader">
- <summary>
- Gets the Base64UrlEncoded <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> associated with this instance.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncodedPayload">
- <summary>
- Gets the Base64UrlEncoded <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> associated with this instance.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Header">
- <summary>
- Gets the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> associated with this instance if the token is signed.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Id">
- <summary>
- Gets the 'value' of the 'JWT ID' claim { jti, ''value' }.
- </summary>
- <remarks>If the 'JWT ID' claim is not found, an empty string is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Issuer">
- <summary>
- Gets the 'value' of the 'issuer' claim { iss, 'value' }.
- </summary>
- <remarks>If the 'issuer' claim is not found, an empty string is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Payload">
- <summary>
- Gets the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> associated with this instance.
- Note that if this JWT is nested ( <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/> != null, this property represnts the payload of the most inner token.
- This property can be null if the content type of the most inner token is unrecognized, in that case
- the content of the token is the string returned by PlainText property.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken">
- <summary>
- Gets the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> associated with this instance.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawAuthenticationTag">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawCiphertext">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawEncryptedKey">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawInitializationVector">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawHeader">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawPayload">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawSignature">
- <summary>
- Gets the original raw data of this instance when it was created.
- </summary>
- <remarks>The original JSON Compact serialized format passed to one of the two constructors <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.String)"/>
- or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.#ctor(System.IdentityModel.Tokens.Jwt.JwtHeader,System.IdentityModel.Tokens.Jwt.JwtPayload,System.String,System.String,System.String)"/></remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SecurityKey">
- <summary>
- Gets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SecurityKey"/>s for this instance.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SignatureAlgorithm">
- <summary>
- Gets the signature algorithm associated with this instance.
- </summary>
- <remarks>If there is a <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials"/> associated with this instance, a value will be returned. Null otherwise.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials">
- <summary>
- Gets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials"/> to use when writing this token.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncryptingCredentials">
- <summary>
- Gets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncryptingCredentials"/> to use when writing this token.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningKey">
- <summary>
- Gets or sets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SecurityKey"/> that signed this instance.
- </summary>
- <remarks><see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler"/>.ValidateSignature(...) sets this value when a <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SecurityKey"/> is used to successfully validate a signature.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Subject">
- <summary>
- Gets the "value" of the 'subject' claim { sub, 'value' }.
- </summary>
- <remarks>If the 'subject' claim is not found, null is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.ValidFrom">
- <summary>
- Gets the 'value' of the 'notbefore' claim { nbf, 'value' } converted to a <see cref="T:System.DateTime"/> assuming 'value' is seconds since UnixEpoch (UTC 1970-01-01T0:0:0Z).
- </summary>
- <remarks>If the 'notbefore' claim is not found, then <see cref="F:System.DateTime.MinValue"/> is returned.</remarks>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.ValidTo">
- <summary>
- Gets the 'value' of the 'expiration' claim { exp, 'value' } converted to a <see cref="T:System.DateTime"/> assuming 'value' is seconds since UnixEpoch (UTC 1970-01-01T0:0:0Z).
- </summary>
- <remarks>If the 'expiration' claim is not found, then <see cref="F:System.DateTime.MinValue"/> is returned.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.ToString">
- <summary>
- Serializes the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> and <see cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/>
- </summary>
- <returns>A string containing the header and payload in JSON format.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Decode(System.String[],System.String)">
- <summary>
- Decodes the string into the header, payload and signature.
- </summary>
- <param name="tokenParts">the tokenized string.</param>
- <param name="rawData">the original token.</param>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.DecodeJws(System.String[])">
- <summary>
- Decodes the payload and signature from the JWS parts.
- </summary>
- <param name="tokenParts">Parts of the JWS including the header.</param>
- <remarks>Assumes Header has already been set.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.DecodeJwe(System.String[])">
- <summary>
- Decodes the payload and signature from the JWE parts.
- </summary>
- <param name="tokenParts">Parts of the JWE including the header.</param>
- <remarks>Assumes Header has already been set.</remarks>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler">
- <summary>
- A <see cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenHandler"/> designed for creating and validating Json Web Tokens. See: http://tools.ietf.org/html/rfc7519 and http://www.rfc-editor.org/info/rfc7515
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DefaultInboundClaimTypeMap">
- <summary>
- Default claim type mapping for inbound claims.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DefaultMapInboundClaims">
- <summary>
- Default value for the flag that determines whether or not the InboundClaimTypeMap is used.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DefaultOutboundClaimTypeMap">
- <summary>
- Default claim type mapping for outbound claims.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DefaultInboundClaimFilter">
- <summary>
- Default claim type filter list.
- </summary>
- </member>
- <member name="F:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DefaultOutboundAlgorithmMap">
- <summary>
- Default JwtHeader algorithm mapping
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.#cctor">
- <summary>
- Static initializer for a new object. Static initializers run before the first instance of the type is created.
- </summary>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.#ctor">
- <summary>
- Initializes a new instance of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler"/> class.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.MapInboundClaims">
- <summary>
- Gets or sets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.MapInboundClaims"/> property which is used when determining whether or not to map claim types that are extracted when validating a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- <para>If this is set to true, the <see cref="P:System.Security.Claims.Claim.Type"/> is set to the JSON claim 'name' after translating using this mapping. Otherwise, no mapping occurs.</para>
- <para>The default value is true.</para>
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap">
- <summary>
- Gets or sets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/> which is used when setting the <see cref="P:System.Security.Claims.Claim.Type"/> for claims in the <see cref="T:System.Security.Claims.ClaimsPrincipal"/> extracted when validating a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- <para>The <see cref="P:System.Security.Claims.Claim.Type"/> is set to the JSON claim 'name' after translating using this mapping.</para>
- <para>The default value is ClaimTypeMapping.InboundClaimTypeMap.</para>
- </summary>
- <exception cref="T:System.ArgumentNullException">'value' is null.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap">
- <summary>
- <para>Gets or sets the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> which is used when creating a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> from <see cref="T:System.Security.Claims.Claim"/>(s).</para>
- <para>The JSON claim 'name' value is set to <see cref="P:System.Security.Claims.Claim.Type"/> after translating using this mapping.</para>
- <para>The default value is ClaimTypeMapping.OutboundClaimTypeMap</para>
- </summary>
- <remarks>This mapping is applied only when using <see cref="M:System.IdentityModel.Tokens.Jwt.JwtPayload.AddClaim(System.Security.Claims.Claim)"/> or <see cref="M:System.IdentityModel.Tokens.Jwt.JwtPayload.AddClaims(System.Collections.Generic.IEnumerable{System.Security.Claims.Claim})"/>. Adding values directly will not result in translation.</remarks>
- <exception cref="T:System.ArgumentNullException">'value' is null.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundAlgorithmMap">
- <summary>
- Gets the outbound algorithm map that is passed to the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> constructor.
- </summary>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimFilter">
- <summary>Gets or sets the <see cref="T:System.Collections.Generic.ISet`1"/> used to filter claims when populating a <see cref="T:System.Security.Claims.ClaimsIdentity"/> claims form a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- When a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> is validated, claims with types found in this <see cref="T:System.Collections.Generic.ISet`1"/> will not be added to the <see cref="T:System.Security.Claims.ClaimsIdentity"/>.
- <para>The default value is ClaimTypeMapping.InboundClaimFilter.</para>
- </summary>
- <exception cref="T:System.ArgumentNullException">'value' is null.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ShortClaimTypeProperty">
- <summary>
- Gets or sets the property name of <see cref="P:System.Security.Claims.Claim.Properties"/> the will contain the original JSON claim 'name' if a mapping occurred when the <see cref="T:System.Security.Claims.Claim"/>(s) were created.
- <para>See <seealso cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/> for more information.</para>
- </summary>
- <exception cref="T:System.ArgumentException">If <see cref="T:System.String"/>.IsNullOrWhiteSpace('value') is true.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.JsonClaimTypeProperty">
- <summary>
- Gets or sets the property name of <see cref="P:System.Security.Claims.Claim.Properties"/> the will contain .Net type that was recognized when JwtPayload.Claims serialized the value to JSON.
- <para>See <seealso cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.InboundClaimTypeMap"/> for more information.</para>
- </summary>
- <exception cref="T:System.ArgumentException">If <see cref="T:System.String"/>.IsNullOrWhiteSpace('value') is true.</exception>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanValidateToken">
- <summary>
- Returns a value that indicates if this handler can validate a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityToken"/>.
- </summary>
- <returns>'true', indicating this instance can validate a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</returns>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanWriteToken">
- <summary>
- Gets the value that indicates if this instance can write a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityToken"/>.
- </summary>
- <returns>'true', indicating this instance can write a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</returns>
- </member>
- <member name="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.TokenType">
- <summary>
- Gets the type of the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <return>The type of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/></return>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanReadToken(System.String)">
- <summary>
- Determines if the string is a well formed Json Web Token (JWT).
- <para>see: http://tools.ietf.org/html/rfc7519 </para>
- </summary>
- <param name="token">String that should represent a valid JWT.</param>
- <remarks>Uses <see cref="M:System.Text.RegularExpressions.Regex.IsMatch(System.String,System.String)"/> matching one of:
- <para>JWS: @"^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$"</para>
- <para>JWE: (dir): @"^[A-Za-z0-9-_]+\.\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$"</para>
- <para>JWE: (wrappedkey): @"^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]$"</para>
- </remarks>
- <returns>
- <para>'false' if the token is null or whitespace.</para>
- <para>'false' if token.Length is greater than <see cref="P:Microsoft.IdentityModel.Tokens.TokenHandler.MaximumTokenSizeInBytes"/>.</para>
- <para>'true' if the token is in JSON compact serialization format.</para>
- </returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateEncodedJwt(Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor)">
- <summary>
- Returns a Json Web Token (JWT).
- </summary>
- <param name="tokenDescriptor">A <see cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor"/> that contains details of contents of the token.</param>
- <remarks>A JWS and JWE can be returned.
- <para>If <see cref="P:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor.EncryptingCredentials"/>is provided, then a JWE will be created.</para>
- <para>If <see cref="P:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor.SigningCredentials"/> is provided then a JWS will be created.</para>
- <para>If both are provided then a JWE with an embedded JWS will be created.</para>
- </remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateEncodedJwt(System.String,System.String,System.Security.Claims.ClaimsIdentity,System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SigningCredentials)">
- <summary>
- Creates a JWT in 'Compact Serialization Format'.
- </summary>
- <param name="issuer">The issuer of the token.</param>
- <param name="audience">The audience for this token.</param>
- <param name="subject">The source of the <see cref="T:System.Security.Claims.Claim"/>(s) for this token.</param>
- <param name="notBefore">The notbefore time for this token.</param>
- <param name="expires">The expiration time for this token.</param>
- <param name="issuedAt">The issue time for this token.</param>
- <param name="signingCredentials">Contains cryptographic material for generating a signature.</param>
- <remarks>If <see cref="P:System.Security.Claims.ClaimsIdentity.Actor"/> is not null, then a claim { actort, 'value' } will be added to the payload. See <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateActorValue(System.Security.Claims.ClaimsIdentity)"/> for details on how the value is created.
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> for details on how the HeaderParameters are added to the header.</para>
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> for details on how the values are added to the payload.</para>
- <para>Each <see cref="T:System.Security.Claims.Claim"/> in the <paramref name="subject"/> will map <see cref="P:System.Security.Claims.Claim.Type"/> by applying <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/>. Modifying <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> could change the outbound JWT.</para>
- <para>If <see cref="T:Microsoft.IdentityModel.Tokens.SigningCredentials"/> is provided, then a JWS will be created.</para>
- </remarks>
- <returns>A Base64UrlEncoded string in 'Compact Serialization Format'.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateEncodedJwt(System.String,System.String,System.Security.Claims.ClaimsIdentity,System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SigningCredentials,Microsoft.IdentityModel.Tokens.EncryptingCredentials)">
- <summary>
- Creates a JWT in 'Compact Serialization Format'.
- </summary>
- <param name="issuer">The issuer of the token.</param>
- <param name="audience">The audience for this token.</param>
- <param name="subject">The source of the <see cref="T:System.Security.Claims.Claim"/>(s) for this token.</param>
- <param name="notBefore">Translated into 'epoch time' and assigned to 'nbf'.</param>
- <param name="expires">Translated into 'epoch time' and assigned to 'exp'.</param>
- <param name="issuedAt">Translated into 'epoch time' and assigned to 'iat'.</param>
- <param name="signingCredentials">Contains cryptographic material for signing.</param>
- <param name="encryptingCredentials">Contains cryptographic material for encrypting.</param>
- <remarks>If <see cref="P:System.Security.Claims.ClaimsIdentity.Actor"/> is not null, then a claim { actort, 'value' } will be added to the payload. <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateActorValue(System.Security.Claims.ClaimsIdentity)"/> for details on how the value is created.
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> for details on how the HeaderParameters are added to the header.</para>
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> for details on how the values are added to the payload.</para>
- <para>Each <see cref="T:System.Security.Claims.Claim"/> in the <paramref name="subject"/> will map <see cref="P:System.Security.Claims.Claim.Type"/> by applying <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/>. Modifying <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> could change the outbound JWT.</para>
- </remarks>
- <returns>A Base64UrlEncoded string in 'Compact Serialization Format'.</returns>
- <exception cref="T:System.ArgumentException">If 'expires' <= 'notBefore'.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateJwtSecurityToken(Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor)">
- <summary>
- Creates a Json Web Token (JWT).
- </summary>
- <param name="tokenDescriptor"> A <see cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor"/> that contains details of contents of the token.</param>
- <remarks><see cref="P:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor.SigningCredentials"/> is used to sign <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData"/>.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateJwtSecurityToken(System.String,System.String,System.Security.Claims.ClaimsIdentity,System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SigningCredentials,Microsoft.IdentityModel.Tokens.EncryptingCredentials)">
- <summary>
- Creates a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>
- </summary>
- <param name="issuer">The issuer of the token.</param>
- <param name="audience">The audience for this token.</param>
- <param name="subject">The source of the <see cref="T:System.Security.Claims.Claim"/>(s) for this token.</param>
- <param name="notBefore">The notbefore time for this token.</param>
- <param name="expires">The expiration time for this token.</param>
- <param name="issuedAt">The issue time for this token.</param>
- <param name="signingCredentials">Contains cryptographic material for generating a signature.</param>
- <param name="encryptingCredentials">Contains cryptographic material for encrypting the token.</param>
- <remarks>If <see cref="P:System.Security.Claims.ClaimsIdentity.Actor"/> is not null, then a claim { actort, 'value' } will be added to the payload. <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateActorValue(System.Security.Claims.ClaimsIdentity)"/> for details on how the value is created.
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> for details on how the HeaderParameters are added to the header.</para>
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> for details on how the values are added to the payload.</para>
- <para>Each <see cref="T:System.Security.Claims.Claim"/> on the <paramref name="subject"/> added will have <see cref="P:System.Security.Claims.Claim.Type"/> translated according to the mapping found in
- <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/>. Adding and removing to <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> will affect the name component of the Json claim.</para>
- <para><see cref="M:Microsoft.IdentityModel.Tokens.SigningCredentials.#ctor(Microsoft.IdentityModel.Tokens.SecurityKey,System.String)"/> is used to sign <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData"/>.</para>
- <para><see cref="M:Microsoft.IdentityModel.Tokens.EncryptingCredentials.#ctor(Microsoft.IdentityModel.Tokens.SecurityKey,System.String,System.String)"/> is used to encrypt <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData"/> or <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawPayload"/> .</para>
- </remarks>
- <returns>A <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</returns>
- <exception cref="T:System.ArgumentException">If 'expires' <= 'notBefore'.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateJwtSecurityToken(System.String,System.String,System.Security.Claims.ClaimsIdentity,System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SigningCredentials)">
- <summary>
- Creates a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>
- </summary>
- <param name="issuer">The issuer of the token.</param>
- <param name="audience">The audience for this token.</param>
- <param name="subject">The source of the <see cref="T:System.Security.Claims.Claim"/>(s) for this token.</param>
- <param name="notBefore">The notbefore time for this token.</param>
- <param name="expires">The expiration time for this token.</param>
- <param name="issuedAt">The issue time for this token.</param>
- <param name="signingCredentials">Contains cryptographic material for generating a signature.</param>
- <remarks>If <see cref="P:System.Security.Claims.ClaimsIdentity.Actor"/> is not null, then a claim { actort, 'value' } will be added to the payload. <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateActorValue(System.Security.Claims.ClaimsIdentity)"/> for details on how the value is created.
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtHeader"/> for details on how the HeaderParameters are added to the header.</para>
- <para>See <seealso cref="T:System.IdentityModel.Tokens.Jwt.JwtPayload"/> for details on how the values are added to the payload.</para>
- <para>Each <see cref="T:System.Security.Claims.Claim"/> on the <paramref name="subject"/> added will have <see cref="P:System.Security.Claims.Claim.Type"/> translated according to the mapping found in
- <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/>. Adding and removing to <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.OutboundClaimTypeMap"/> will affect the name component of the Json claim.</para>
- <para><see cref="M:Microsoft.IdentityModel.Tokens.SigningCredentials.#ctor(Microsoft.IdentityModel.Tokens.SecurityKey,System.String)"/> is used to sign <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData"/>.</para>
- </remarks>
- <returns>A <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</returns>
- <exception cref="T:System.ArgumentException">If 'expires' <= 'notBefore'.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateToken(Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor)">
- <summary>
- Creates a Json Web Token (JWT).
- </summary>
- <param name="tokenDescriptor"> A <see cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor"/> that contains details of contents of the token.</param>
- <remarks><see cref="P:Microsoft.IdentityModel.Tokens.SecurityTokenDescriptor.SigningCredentials"/> is used to sign <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.RawData"/>.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ReadJwtToken(System.String)">
- <summary>
- Converts a string into an instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="token">A 'JSON Web Token' (JWT) in JWS or JWE Compact Serialization Format.</param>
- <returns>A <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/></returns>
- <exception cref="T:System.ArgumentNullException">'token' is null or empty.</exception>
- <exception cref="T:System.ArgumentException">'token.Length' is greater than <see cref="P:Microsoft.IdentityModel.Tokens.TokenHandler.MaximumTokenSizeInBytes"/>.</exception>
- <exception cref="T:System.ArgumentException"><see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanReadToken(System.String)"/></exception>
- <remarks><para>If the 'token' is in JWE Compact Serialization format, only the protected header will be deserialized.</para>
- This method is unable to decrypt the payload. Use <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters,Microsoft.IdentityModel.Tokens.SecurityToken@)"/>to obtain the payload.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ReadToken(System.String)">
- <summary>
- Converts a string into an instance of <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="token">A 'JSON Web Token' (JWT) in JWS or JWE Compact Serialization Format.</param>
- <returns>A <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/></returns>
- <exception cref="T:System.ArgumentNullException">'token' is null or empty.</exception>
- <exception cref="T:System.ArgumentException">'token.Length' is greater than <see cref="P:Microsoft.IdentityModel.Tokens.TokenHandler.MaximumTokenSizeInBytes"/>.</exception>
- <exception cref="T:System.ArgumentException"><see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanReadToken(System.String)"/></exception>
- <remarks><para>If the 'token' is in JWE Compact Serialization format, only the protected header will be deserialized.</para>
- This method is unable to decrypt the payload. Use <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters,Microsoft.IdentityModel.Tokens.SecurityToken@)"/>to obtain the payload.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ReadToken(System.Xml.XmlReader,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Deserializes token with the provided <see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/>.
- </summary>
- <param name="reader"><see cref="T:System.Xml.XmlReader"/>.</param>
- <param name="validationParameters">The current <see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/>.</param>
- <returns>The <see cref="T:Microsoft.IdentityModel.Tokens.SecurityToken"/></returns>
- <remarks>This method is not current supported.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateToken(System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters,Microsoft.IdentityModel.Tokens.SecurityToken@)">
- <summary>
- Reads and validates a 'JSON Web Token' (JWT) encoded as a JWS or JWE in Compact Serialized Format.
- </summary>
- <param name="token">the JWT encoded as JWE or JWS</param>
- <param name="validationParameters">Contains validation parameters for the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</param>
- <param name="validatedToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that was validated.</param>
- <exception cref="T:System.ArgumentNullException"><paramref name="token"/> is null or whitespace.</exception>
- <exception cref="T:System.ArgumentNullException"><paramref name="validationParameters"/> is null.</exception>
- <exception cref="T:System.ArgumentException"><paramref name="token"/>.Length is greater than <see cref="P:Microsoft.IdentityModel.Tokens.TokenHandler.MaximumTokenSizeInBytes"/>.</exception>
- <exception cref="T:System.ArgumentException"><paramref name="token"/> does not have 3 or 5 parts.</exception>
- <exception cref="T:System.ArgumentException"><see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CanReadToken(System.String)"/> returns false.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenDecryptionFailedException"><paramref name="token"/> was a JWE was not able to be decrypted.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenEncryptionKeyNotFoundException"><paramref name="token"/> 'kid' header claim is not null AND decryption fails.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenException"><paramref name="token"/> 'enc' header claim is null or empty.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenExpiredException"><paramref name="token"/> 'exp' claim is < DateTime.UtcNow.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenInvalidAudienceException"><see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidAudience"/> is null or whitespace and <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidAudiences"/> is null. Audience is not validated if <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidateAudience"/> is set to false.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenInvalidAudienceException"><paramref name="token"/> 'aud' claim did not match either <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidAudience"/> or one of <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.ValidAudiences"/>.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenInvalidLifetimeException"><paramref name="token"/> 'nbf' claim is > 'exp' claim.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenInvalidSignatureException"><paramref name="token"/>.signature is not properly formatted.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenNoExpirationException"><paramref name="token"/> 'exp' claim is missing and <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.RequireExpirationTime"/> is true.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenNoExpirationException"><see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.TokenReplayCache"/> is not null and expirationTime.HasValue is false. When a TokenReplayCache is set, tokens require an expiration time.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenNotYetValidException"><paramref name="token"/> 'nbf' claim is > DateTime.UtcNow.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenReplayAddFailedException"><paramref name="token"/> could not be added to the <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.TokenReplayCache"/>.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenReplayDetectedException"><paramref name="token"/> is found in the cache.</exception>
- <returns> A <see cref="T:System.Security.Claims.ClaimsPrincipal"/> from the JWT. Does not include claims found in the JWT header.</returns>
- <remarks>
- Many of the exceptions listed above are not thrown directly from this method. See <see cref="T:Microsoft.IdentityModel.Tokens.Validators"/> to examin the call graph.
- </remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateTokenPayload(System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Validates the JSON payload of a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="jwtToken">The token to validate.</param>
- <param name="validationParameters">Contains validation parameters for the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</param>
- <returns>A <see cref="T:System.Security.Claims.ClaimsPrincipal"/> from the jwt. Does not include the header claims.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.WriteToken(Microsoft.IdentityModel.Tokens.SecurityToken)">
- <summary>
- Serializes a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> into a JWT in Compact Serialization Format.
- </summary>
- <param name="token"><see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> to serialize.</param>
- <remarks>
- <para>The JWT will be serialized as a JWE or JWS.</para>
- <para><see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Payload"/> will be used to create the JWT. If there is an inner token, the inner token's payload will be used.</para>
- <para>If either <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials"/> or <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/>.SigningCredentials are set, the JWT will be signed.</para>
- <para>If <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncryptingCredentials"/> is set, a JWE will be created using the JWT above as the plaintext.</para>
- </remarks>
- <exception cref="T:System.ArgumentNullException">'token' is null.</exception>
- <exception cref="T:System.ArgumentException">'token' is not a not <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenEncryptionFailedException">both <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningCredentials"/> and <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/> are set.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenEncryptionFailedException">both <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/> and <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/>.EncryptingCredentials are set.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenEncryptionFailedException">if <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.InnerToken"/> is set and <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.EncryptingCredentials"/> is not set.</exception>
- <returns>A JWE or JWS in 'Compact Serialization Format'.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateSignature(System.Byte[],System.Byte[],Microsoft.IdentityModel.Tokens.SecurityKey,System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Obtains a <see cref="T:Microsoft.IdentityModel.Tokens.SignatureProvider"/> and validates the signature.
- </summary>
- <param name="encodedBytes">Bytes to validate.</param>
- <param name="signature">Signature to compare against.</param>
- <param name="key"><See cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> to use.</param>
- <param name="algorithm">Crypto algorithm to use.</param>
- <param name="validationParameters">Priority will be given to <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.CryptoProviderFactory"/> over <see cref="P:Microsoft.IdentityModel.Tokens.SecurityKey.CryptoProviderFactory"/>.</param>
- <returns>'true' if signature is valid.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateSignature(System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Validates that the signature, if found or required, is valid.
- </summary>
- <param name="token">A JWS token.</param>
- <param name="validationParameters"><see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> that contains signing keys.</param>
- <exception cref="T:System.ArgumentNullException">If 'jwt' is null or whitespace.</exception>
- <exception cref="T:System.ArgumentNullException">If 'validationParameters' is null.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenValidationException">If a signature is not found and <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.RequireSignedTokens"/> is true.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenSignatureKeyNotFoundException">If the 'token' has a key identifier and none of the <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/>(s) provided result in a validated signature.
- This can indicate that a key refresh is required.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenInvalidSignatureException">If after trying all the <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/>(s), none result in a validated signature AND the 'token' does not have a key identifier.</exception>
- <returns>A <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that has the signature validated if token was signed.</returns>
- <remarks><para>If the 'token' is signed, the signature is validated even if <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.RequireSignedTokens"/> is false.</para>
- <para>If the 'token' signature is validated, then the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningKey"/> will be set to the key that signed the 'token'.It is the responsibility of <see cref="P:Microsoft.IdentityModel.Tokens.TokenValidationParameters.SignatureValidator"/> to set the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningKey"/></para></remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateClaimsIdentity(System.IdentityModel.Tokens.Jwt.JwtSecurityToken,System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Creates a <see cref="T:System.Security.Claims.ClaimsIdentity"/> from a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> to use as a <see cref="T:System.Security.Claims.Claim"/> source.</param>
- <param name="issuer">The value to set <see cref="P:System.Security.Claims.Claim.Issuer"/></param>
- <param name="validationParameters"> Contains parameters for validating the token.</param>
- <returns>A <see cref="T:System.Security.Claims.ClaimsIdentity"/> containing the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.Claims"/>.</returns>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.CreateActorValue(System.Security.Claims.ClaimsIdentity)">
- <summary>
- Creates the 'value' for the actor claim: { actort, 'value' }
- </summary>
- <param name="actor"><see cref="T:System.Security.Claims.ClaimsIdentity"/> as actor.</param>
- <returns><see cref="T:System.String"/> representing the actor.</returns>
- <remarks>If <see cref="P:System.Security.Claims.ClaimsIdentity.BootstrapContext"/> is not null:
- <para>  If 'type' is 'string', return as string.</para>
- <para>  if 'type' is 'BootstrapContext' and 'BootstrapContext.SecurityToken' is 'JwtSecurityToken'</para>
- <para>    if 'JwtSecurityToken.RawData' != null, return RawData.</para>
- <para>    else return <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.WriteToken(Microsoft.IdentityModel.Tokens.SecurityToken)"/>.</para>
- <para>  if 'BootstrapContext.Token' != null, return 'Token'.</para>
- <para>default: <see cref="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.WriteToken(Microsoft.IdentityModel.Tokens.SecurityToken)"/> new ( <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>( actor.Claims ).</para>
- </remarks>
- <exception cref="T:System.ArgumentNullException">'actor' is null.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateAudience(System.Collections.Generic.IEnumerable{System.String},System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Determines if the audiences found in a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> are valid.
- </summary>
- <param name="audiences">The audiences found in the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.</param>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> being validated.</param>
- <param name="validationParameters"><see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- <remarks>See <see cref="M:Microsoft.IdentityModel.Tokens.Validators.ValidateAudience(System.Collections.Generic.IEnumerable{System.String},Microsoft.IdentityModel.Tokens.SecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)"/> for additional details.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateLifetime(System.Nullable{System.DateTime},System.Nullable{System.DateTime},System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Validates the lifetime of a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>.
- </summary>
- <param name="notBefore">The <see cref="T:System.DateTime"/> value of the 'nbf' claim if it exists in the 'jwtToken'.</param>
- <param name="expires">The <see cref="T:System.DateTime"/> value of the 'exp' claim if it exists in the 'jwtToken'.</param>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> being validated.</param>
- <param name="validationParameters"><see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- <remarks><see cref="M:Microsoft.IdentityModel.Tokens.Validators.ValidateLifetime(System.Nullable{System.DateTime},System.Nullable{System.DateTime},Microsoft.IdentityModel.Tokens.SecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)"/> for additional details.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateIssuer(System.String,System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Determines if the issuer found in a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> is valid.
- </summary>
- <param name="issuer">The issuer to validate</param>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that is being validated.</param>
- <param name="validationParameters"><see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- <returns>The issuer to use when creating the <see cref="T:System.Security.Claims.Claim"/>(s) in the <see cref="T:System.Security.Claims.ClaimsIdentity"/>.</returns>
- <remarks><see cref="M:Microsoft.IdentityModel.Tokens.Validators.ValidateIssuer(System.String,Microsoft.IdentityModel.Tokens.SecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)"/> for additional details.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateTokenReplay(System.Nullable{System.DateTime},System.String,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Determines if a <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> is already validated.
- </summary>
- <param name="expires">The <see cref="T:System.DateTime"/> value of the 'exp' claim if it exists in the <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/>'.</param>
- <param name="securityToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that is being validated.</param>
- <param name="validationParameters"><see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ResolveIssuerSigningKey(System.String,System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Returns a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> to use when validating the signature of a token.
- </summary>
- <param name="token">The <see cref="T:System.String"/> representation of the token that is being validated.</param>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that is being validated.</param>
- <param name="validationParameters">A <see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- <returns>Returns a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> to use for signature validation.</returns>
- <remarks>If key fails to resolve, then null is returned</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ResolveTokenDecryptionKey(System.String,System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Returns a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> to use when decryption a JWE.
- </summary>
- <param name="token">The <see cref="T:System.String"/> the token that is being decrypted.</param>
- <param name="jwtToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> that is being decrypted.</param>
- <param name="validationParameters">A <see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/> required for validation.</param>
- <returns>Returns a <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> to use for signature validation.</returns>
- <remarks>If key fails to resolve, then null is returned</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.DecryptToken(System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Decrypts a JWE and returns the clear text
- </summary>
- <param name="jwtToken">the JWE that contains the cypher text.</param>
- <param name="validationParameters">contains crypto material.</param>
- <returns>the decoded / cleartext contents of the JWE.</returns>
- <exception cref="T:System.ArgumentNullException">if 'jwtToken' is null.</exception>
- <exception cref="T:System.ArgumentNullException">if 'validationParameters' is null.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenException">if 'jwtToken.Header.enc' is null or empty.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenEncryptionKeyNotFoundException">if 'jwtToken.Header.kid' is not null AND decryption fails.</exception>
- <exception cref="T:Microsoft.IdentityModel.Tokens.SecurityTokenDecryptionFailedException">if the JWE was not able to be decrypted.</exception>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateIssuerSecurityKey(Microsoft.IdentityModel.Tokens.SecurityKey,System.IdentityModel.Tokens.Jwt.JwtSecurityToken,Microsoft.IdentityModel.Tokens.TokenValidationParameters)">
- <summary>
- Validates the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningKey"/> is an expected value.
- </summary>
- <param name="key">The <see cref="T:Microsoft.IdentityModel.Tokens.SecurityKey"/> that signed the <see cref="T:Microsoft.IdentityModel.Tokens.SecurityToken"/>.</param>
- <param name="securityToken">The <see cref="T:System.IdentityModel.Tokens.Jwt.JwtSecurityToken"/> to validate.</param>
- <param name="validationParameters">The current <see cref="T:Microsoft.IdentityModel.Tokens.TokenValidationParameters"/>.</param>
- <remarks>If the <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityToken.SigningKey"/> is a <see cref="T:Microsoft.IdentityModel.Tokens.X509SecurityKey"/> then the X509Certificate2 will be validated using the CertificateValidator.</remarks>
- </member>
- <member name="M:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.WriteToken(System.Xml.XmlWriter,Microsoft.IdentityModel.Tokens.SecurityToken)">
- <summary>
- Serializes to XML a token of the type handled by this instance.
- </summary>
- <param name="writer">The XML writer.</param>
- <param name="token">A token of type <see cref="P:System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.TokenType"/>.</param>
- </member>
- <member name="T:System.IdentityModel.Tokens.Jwt.LogMessages">
- <summary>
- Log messages and codes
- </summary>
- </member>
- </members>
- </doc>
|