Table of Contents

Namespace Keycloak.AuthServices.Authorization.TokenIntrospection

Classes

KeycloakTokenIntrospectionClaimsTransformation

Claims transformation that enriches a ClaimsPrincipal with claims resolved from the Keycloak token introspection endpoint. Designed for use with lightweight access tokens that lack business claims.

KeycloakTokenIntrospectionClient

Supports all classes in the .NET class hierarchy and provides low-level services to derived classes. This is the ultimate base class of all .NET classes; it is the root of the type hierarchy.

KeycloakTokenIntrospectionOptions

Options for Keycloak token introspection. Used to resolve full claim sets from lightweight access tokens.

KeycloakTokenIntrospectionOptionsValidator

Validates KeycloakTokenIntrospectionOptions at startup. Ensures client credentials are configured when introspection is enabled.

TokenIntrospectionResponse

Represents the response from the Keycloak token introspection endpoint.

Interfaces

IKeycloakTokenIntrospectionClient

Client for Keycloak token introspection endpoint. Resolves the full claim set for lightweight access tokens.

IKeycloakTokenIntrospectionTransformation

Marker interface for the token introspection claims transformation. Allows the authorization composite to discover and chain the introspection transformation without depending on the concrete implementation.