Namespace OpenShell.Oidc
Classes
- ClientCredentialsAuth
A renewable OAuth 2.0 client-credentials bearer provider. Tokens and secrets stay in memory; renewal is single-flight, proactive (30 s before expiry) and reactive (after
Unauthenticated).
- OidcDiscovery
Fetches and validates OpenID Connect discovery documents, caching them for ten minutes.
- OidcException
An OIDC failure. Messages never contain client secrets, tokens, or provider response bodies.
- OidcLogin
Entry points for the OIDC flows: interactive login, device login, refresh and client credentials.
- OidcOptions
Settings shared by every OIDC flow. Secrets are held in memory only and never logged.
- OidcProviderMetadata
The trusted subset of an OpenID Connect discovery document.
- OidcTokens
Tokens returned by an OIDC flow.
Enums
- OidcFailure
Identifies which OIDC step failed.