56510de55e
Why: standardize session login/refresh/logout/me behavior for web clients behind thalos security boundaries. What: add canonical routes, cookie policy handling, grpc session calls, compatibility aliases, standardized auth errors, updated contracts, tests, and docs. Rule: keep BFF as edge adapter over service contracts and preserve identity ownership in thalos.
17 lines
615 B
C#
17 lines
615 B
C#
using BuildingBlock.Identity.Contracts.Conventions;
|
|
|
|
namespace Thalos.Bff.Contracts.Api;
|
|
|
|
/// <summary>
|
|
/// API response contract for current authenticated session details.
|
|
/// </summary>
|
|
/// <param name="IsAuthenticated">Indicates whether the caller has an authenticated session.</param>
|
|
/// <param name="SubjectId">Identity subject identifier.</param>
|
|
/// <param name="TenantId">Tenant identifier.</param>
|
|
/// <param name="Provider">Identity auth provider.</param>
|
|
public sealed record SessionMeApiResponse(
|
|
bool IsAuthenticated,
|
|
string SubjectId,
|
|
string TenantId,
|
|
IdentityAuthProvider Provider);
|