96c53d9dab
Why: provide service-side canonical login/refresh orchestration for session-based web auth. What: add session contracts, refresh token codec with provider-agnostic secret boundary, grpc session methods, DI wiring, tests, and docs. Rule: preserve thalos identity ownership and keep transport adapters at service edge.
21 lines
817 B
C#
21 lines
817 B
C#
using BuildingBlock.Identity.Contracts.Conventions;
|
|
|
|
namespace Thalos.Service.Identity.Abstractions.Contracts;
|
|
|
|
/// <summary>
|
|
/// Transport-neutral response contract for session login/start.
|
|
/// </summary>
|
|
/// <param name="AccessToken">Issued access token value.</param>
|
|
/// <param name="RefreshToken">Issued refresh token value.</param>
|
|
/// <param name="ExpiresInSeconds">Access token expiration in seconds.</param>
|
|
/// <param name="SubjectId">Identity subject identifier.</param>
|
|
/// <param name="TenantId">Tenant scope identifier.</param>
|
|
/// <param name="Provider">Identity provider for the session.</param>
|
|
public sealed record StartIdentitySessionResponse(
|
|
string AccessToken,
|
|
string RefreshToken,
|
|
int ExpiresInSeconds,
|
|
string SubjectId,
|
|
string TenantId,
|
|
IdentityAuthProvider Provider);
|