Interface IAuthTokenService

public interface IAuthTokenService

Methods

Emits a new authentication token for a given userAccount.

string EmitAuthTokenForUserAccount(User userAccount)

string: The token string ready for the user to append to his subsequent requests (inside the Authorization HTTP header with the Bearer prefix).

Emits a new defibrillator token useful for reviving dead sessions (expired).

Defi-Tokens have a slightly longer lifetime, but need to be handled with the same (if not more) care as the normal auth tokens.

string EmitDefibrillatorTokenForUserAccount(User userAccount)

Extracts the authorization header value from a request's HttpContext.

string? ExtractJwt(HttpContext httpContext)

httpContext HttpContext: HTTP request's HttpContext to extract the token from.

string: The found JWT (null if no auth token was found inside the request's authorization header).

Checks whether a defibrillator token that was emitted by the EmitDefibrillatorTokenForUserAccount(User) method is valid or not.

string? ValidateReviveRequest(ReviveRequestDto dto)

string: null if validation failed; the sub claim value if validation was successful (which should correspond to the User's Slug value).

This will NOT obliterate the token: do not forget to do that in case of validity and renewal!