Reintroduce SecurityTokenHandler.ValidateToken()

The SecurityTokenHandler base class doesn’t expose this precious method. Please consider bringing it back.

/cc @brentschmaltz @polita

[kevinchalet]

In the meantime, SecurityTokenHandler has no validation method, which requires casting handler instances to ISecurityTokenValidator… this doesn’t make much sense.

[brentschmaltz]

RawData was originally envisioned to set the bootstrap context on the ClaimsIdentity so OnBehalfOfFlows would work. It is hard to reconcile that all the Claims in a hydrated token map to the RawData. There is an interesting flow where hydrating a token once makes sense, when multiple Identity Providers are involved. In this case you need the ‘iss’ to get the metadata (keys, issuer, …).