Opaque - reference token validation

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem? Please describe the problem.

Hi,

I have an identity provider OIDC compliant which issues a JWT ID token and an opaque access token (or reference token). Microsoft offers a way to validate a JWT bearer however, I did not see an alternative for opaque tokens.

Describe the solution you’d like

I would like to have a method extension that works the same as ServiceCollection.AddJwtBearer() extension.

We would provide almost the same identity provider information such as the issuer uri, user info, and most importantly the introspect endpoint, which checks if the access token is valid or not.

Finally, we could populate the identity principal with the userinfo endpoint, right after validating the token.

Additional context

No response

[blowdart]

Aggh doh. This is what I get for opening github when I wake up 😃

[iamjplant]

Agreed! This would be nice to have for those of us who don’t get JWT’s back!