Class FederatedConnectionAccessTokenRequest
- Namespace
- Auth0.AuthenticationApi.Models
- Assembly
- Auth0.AuthenticationApi.dll
Represents a request to exchange an Auth0 token for an access token issued by one of
Auth0's federated connections (Token Vault), using the Auth0 token-exchange grant
urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token.
public class FederatedConnectionAccessTokenRequest : IClientAuthentication
- Inheritance
-
FederatedConnectionAccessTokenRequest
- Implements
- Inherited Members
- Extension Methods
Remarks
The client must be a private client. The subject token may be an Auth0 access token (AccessToken) or refresh token (RefreshToken).
Properties
ClientAssertionSecurityKey
Security Key to use with Client Assertion.
public SecurityKey ClientAssertionSecurityKey { get; set; }
Property Value
ClientAssertionSecurityKeyAlgorithm
Algorithm for the Security Key to use with Client Assertion.
public string ClientAssertionSecurityKeyAlgorithm { get; set; }
Property Value
ClientId
Client ID of the application.
public string ClientId { get; set; }
Property Value
ClientSecret
Client Secret of the application.
public string ClientSecret { get; set; }
Property Value
Connection
The federated connection to obtain the access token for (for example
google-oauth2). Required.
public string Connection { get; set; }
Property Value
LoginHint
Optional user ID of the current user within the IdP named by Connection.
For example, if the connection is google-oauth2, this is the Google user ID.
public string LoginHint { get; set; }
Property Value
Nonce
Optional nonce to validate against the nonce claim in a returned ID token.
public string? Nonce { get; set; }
Property Value
Remarks
When set, the nonce claim in the returned ID token must exactly match this value. Leave null (the default) to skip nonce validation.
SigningAlgorithm
What JwtSignatureAlgorithm is used to verify the signature of Id Tokens.
public JwtSignatureAlgorithm SigningAlgorithm { get; set; }
Property Value
SubjectToken
The Auth0 token being exchanged. This may be a valid Auth0 access token or refresh token. Required.
public string SubjectToken { get; set; }
Property Value
SubjectTokenType
An identifier that indicates the type of SubjectToken, as a URN. Either AccessToken or RefreshToken. Required.
public string SubjectTokenType { get; set; }