You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/identitymodel/endpoints/introspection.mdx
+6-5Lines changed: 6 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,10 +31,10 @@ The following code sends a reference token to an introspection endpoint:
31
31
Address = Endpoint,
32
32
ClientId = "client",
33
33
ClientSecret = "secret",
34
-
ResponseFormat = ResponseFormat.Jwt,
34
+
ResponseFormat = ResponseFormat.Json,
35
35
36
36
// Optional
37
-
JwtResponseValidator = new CustomIntrospectionJwtResponseValidator()
37
+
// JwtResponseValidator = new CustomIntrospectionJwtResponseValidator()
38
38
};
39
39
40
40
var httpClient = new HttpClient()
@@ -65,8 +65,8 @@ var introspectionResponse = await client.IntrospectTokenAsync(new TokenIntrospec
65
65
66
66
## Token Introspection Response
67
67
68
-
The response is of type `TokenIntrospectionResponse`. Before using the response, you should always check the `IsError`
69
-
property to make sure the request was successful:
68
+
The response of a token introspection request is an object of type `TokenIntrospectionResponse`.
69
+
Before using the response, you should always check the `IsError`property to make sure the request was successful:
70
70
71
71
```csharp
72
72
if (introspectionResponse.IsError) thrownewException(introspectionResponse.Error);
@@ -95,7 +95,8 @@ In addition, it provides access to the following standard response parameters:
95
95
96
96
## JWT Response Validation :badge[v7.1]
97
97
98
-
By default, **no** validation is performed on the incoming JWT response, it is only checked for valid JWT formatting.
98
+
Most applications will not benefit from additional checks at runtime. By default, no validation is performed on the
99
+
incoming JWT response, it is only checked for valid JWT formatting.
99
100
100
101
An extensibility point is available to provide your own implementation of `ITokenIntrospectionJwtResponseValidator` using the `TokenIntrospectionRequest.JwtResponseValidator` property or using `IntrospectionClientOptions`.
0 commit comments