Base client configuration options.
Protected OptionalfetcherCustom fetch implementation used for making HTTP requests. Falls back to the global fetch if not provided.
Optionalinit: RequestInitOptionalinit: RequestInitProtected OptionaljwksCached JSON Web Key Set retrieved from the issuer's JWKS endpoint.
ProtectedjwksDuration (in seconds) for which the JWKS is cached. Defaults to 300 (5 minutes).
ProtectedjwksTimestamp (in seconds) when the cached JWKS expires.
Protected Optional ReadonlyjwksOptional custom resolver for the JSON Web Key Set, used instead of the JWKS request.
Protected OptionalmetadataCached issuer metadata retrieved from the OpenID Connect discovery endpoint.
ProtectedmetadataDuration (in seconds) for which the metadata is cached. Defaults to 300 (5 minutes).
ProtectedmetadataTimestamp (in seconds) when the cached metadata expires.
Protected Optional ReadonlymetadataOptional custom resolver for the issuer metadata, used instead of the discovery request.
Protected ReadonlytenantThe normalized tenant domain URL used as the base for discovery endpoints.
Protected Optional ReadonlytrustIdentifier of the trust store whose mTLS endpoint aliases should be used, if any.
Protected ReadonlyusesWhether the configured client authentication method uses mutual TLS, and therefore requires the mTLS endpoint aliases from the issuer metadata.
StaticdecodeDecodes the payload of a JSON Web Token (JWT) and returns it as an object.
Note: THIS METHOD DOES NOT VERIFY JWT TOKENS.
JWT to decode.
Decoded payload.
MonoCloudTokenError - If decoding fails
Fetches the JSON Web Keys used to sign the ID token. The JWKS is cached for 5 minutes by default.
If true, bypasses the cache and fetches fresh set of JWKS from the server.
The JSON Web Key Set containing the public keys for token verification.
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
Fetches the authorization server metadata from the .well-known endpoint. The metadata is cached for 5 minutes by default.
If true, bypasses the cache and fetches fresh metadata from the server.
The issuer metadata for the tenant, retrieved from the OpenID Connect discovery endpoint.
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
ProtectedresolveResolves an endpoint URL from the issuer metadata, preferring the mutual-TLS alias when the client authenticates over mTLS.
The issuer metadata.
The endpoint to resolve.
The resolved endpoint URL.
MonoCloudValidationError - When the required endpoint is not available in the issuer metadata.
Creates a new instance of MonoCloudOidcClientBase.