Class KeycloakTokenIntrospectionOptions

Namespace

Keycloak.AuthServices.Authorization.TokenIntrospection

Assembly

Keycloak.AuthServices.Authorization.TokenIntrospection.dll

Options for Keycloak token introspection. Used to resolve full claim sets from lightweight access tokens.

public class KeycloakTokenIntrospectionOptions : KeycloakInstallationOptions

Inheritance

object

KeycloakInstallationOptions

KeycloakTokenIntrospectionOptions

Inherited Members

KeycloakInstallationOptions.AuthServerUrl

KeycloakInstallationOptions.Realm

KeycloakInstallationOptions.Resource

KeycloakInstallationOptions.VerifyTokenAudience

KeycloakInstallationOptions.Credentials

KeycloakInstallationOptions.TokenClockSkew

KeycloakInstallationOptions.SslRequired

KeycloakInstallationOptions.KeycloakUrlRealm

KeycloakInstallationOptions.KeycloakTokenEndpoint

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Fields

Section

Default section name.

public const string Section = "Keycloak"

Field Value

string

Properties

CacheDuration

Cache duration for introspection results. Default is 60 seconds.

public TimeSpan CacheDuration { get; set; }

Property Value

TimeSpan

OnTokenIntrospected

Optional delegate invoked after the default claim enrichment logic runs. Use this to add, remove, or transform claims from the raw introspection response.

public Action<ClaimsIdentity, Dictionary<string, JsonElement>>? OnTokenIntrospected { get; set; }

Property Value

Action<ClaimsIdentity, Dictionary<string, JsonElement>>