OAuthClient Class

Properties   Methods   Events   Config Settings   Errors  

The OAuthClient class implements interaction between the client, the resource owner (end-user), and the authorization server via OAuth 2.0 protocol.

Syntax

secureblackbox.Oauthclient

Remarks

OAuthClient implements interaction between the client (an application that needs access to a protected resource), the resource owner (end-user), and the authorization server via OAuth 2.0 (RFC 6749) protocol.

Property List

---

The following is the full list of the properties of the class with short descriptions. Click on the links for further details.

Method List

---

The following is the full list of the methods of the class with short descriptions. Click on the links for further details.

Event List

---

The following is the full list of the events fired by the class with short descriptions. Click on the links for further details.

Config Settings

---

The following is a list of config settings for the class with short descriptions. Click on the links for further details.

AccessToken Property (OAuthClient Class)

Contains the access token.

Syntax

public String getAccessToken();


public void setAccessToken(String accessToken);

Default Value

""

Remarks

Use this property to check or set the authorization access token.

This property is not available at design time.

AuthURL Property (OAuthClient Class)

Specifies the URL of the authorization server.

Syntax

public String getAuthURL();


public void setAuthURL(String authURL);

Default Value

""

Remarks

Use this property to set the URL of the authorization server.

AutoRefresh Property (OAuthClient Class)

Specifies whether access token should be automatically refreshed.

Syntax

public boolean isAutoRefresh();


public void setAutoRefresh(boolean autoRefresh);

Default Value

True

Remarks

Set this property to true to let the class automatically refresh AccessToken. If available, RefreshToken is used to renew access token. Otherwise the authorization process is initiated from the beginning, with user authentication and so on.

BlockedCertificates Property (OAuthClient Class)

The certificates that must be rejected as trust anchors.

Syntax

public CertificateList getBlockedCertificates();


public void setBlockedCertificates(CertificateList blockedCertificates);

Remarks

Use this property to provide a list of compromised or blocked certificates. Any chain containing a blocked certificate will fail validation.

This property is not available at design time.

Please refer to the Certificate type for a complete list of fields.

ClientChain Property (OAuthClient Class)

The TLS client certificate chain.

Syntax

public CertificateList getClientChain();


public void setClientChain(CertificateList clientChain);

Remarks

Assign a certificate chain to this property to enable TLS client authentication in the class. Note that the client's end-entity certificate should have a private key associated with it.

Use CertificateStorage or CertificateManager components to import the certificate from a file, system store, or PKCS11 device.

This property is not available at design time.

Please refer to the Certificate type for a complete list of fields.

ClientID Property (OAuthClient Class)

Client ID of the application which needs access to the protected resource.

Syntax

public String getClientID();


public void setClientID(String clientID);

Default Value

""

Remarks

Use this property to specify the client ID of the application.

ClientSecret Property (OAuthClient Class)

Client secret of the application which needs access to the protected resource.

Syntax

public String getClientSecret();


public void setClientSecret(String clientSecret);

Default Value

""

Remarks

Use this property to specify client secret of the application.

ConnectionInfo Property (OAuthClient Class)

Returns the details of the underlying network connection.

Syntax

public ConnectionInfo getConnectionInfo();

Remarks

Use this property to learn about the connection setup, such as the protocol security details and amounts of data transferred each way.

This property is read-only and not available at design time.

Please refer to the ConnectionInfo type for a complete list of fields.

CustomParameters Property (OAuthClient Class)

Contains custom parameters of the authorization request.

Syntax

public StringNameValuePairList getCustomParameters();

Remarks

This property contains key-value pairs of custom parameters of HTTP request.

This property is read-only and not available at design time.

Please refer to the StringNameValuePair type for a complete list of fields.

ExpiresAt Property (OAuthClient Class)

The expiration time of access token.

Syntax

public String getExpiresAt();


public void setExpiresAt(String expiresAt);

Default Value

""

Remarks

Use this property to check the expiration time of AccessToken.

ExpiresIn Property (OAuthClient Class)

Returns access token lifetime in seconds.

Syntax

public int getExpiresIn();

Default Value

0

Remarks

Use this property to get the AccessToken lifetime in seconds. This value is returned by the authorization server together with the access token. To check the token's expiration moment, use ExpiresAt property.

This property is read-only and not available at design time.

ExternalCrypto Property (OAuthClient Class)

Provides access to external signing and DC parameters.

Syntax

public ExternalCrypto getExternalCrypto();

Remarks

Use this property to tune-up remote cryptography settings. SecureBlackbox supports two independent types of external cryptography: synchronous (based on the ExternalSign event) and asynchronous (based on the DC protocol and the DCAuth signing component).

This property is read-only.

Please refer to the ExternalCrypto type for a complete list of fields.

FailureResponse Property (OAuthClient Class)

The web page showed to the user by the class on authorization failure.

Syntax

public String getFailureResponse();


public void setFailureResponse(String failureResponse);

Default Value

""

Remarks

This property contains the html of the web page to be shown on authorization failure.

FIPSMode Property (OAuthClient Class)

Reserved.

Syntax

public boolean isFIPSMode();


public void setFIPSMode(boolean FIPSMode);

Default Value

False

Remarks

This property is reserved for future use.

GrantType Property (OAuthClient Class)

Specifies which protocol flow should be used to authorize the user.

Syntax

public int getGrantType();


public void setGrantType(int grantType);


Enumerated values:
  public final static int ogtAuthorizationCode = 0;
  public final static int ogtImplicit = 1;
  public final static int ogtPasswordCredentials = 2;
  public final static int ogtClientCredentials = 3;
  public final static int ogtHybridIdToken = 4;
  public final static int ogtHybridToken = 5;
  public final static int ogtHybridAll = 6;

Default Value

0

Remarks

Use this property to specify the authorization protocol to use.

IDToken Property (OAuthClient Class)

Contains the ID Token parameter for JWT.

Syntax

public String getIDToken();

Default Value

""

Remarks

Use this property to get the id_token parameter (if any) than can be used for JWT operations.

This property is read-only and not available at design time.

KeepAlivePolicy Property (OAuthClient Class)

Defines the keep-alive handling policy.

Syntax

public int getKeepAlivePolicy();


public void setKeepAlivePolicy(int keepAlivePolicy);


Enumerated values:
  public final static int ckapStandardDefined = 0;
  public final static int ckapPreferKeepAlive = 1;
  public final static int ckapRelyOnServer = 2;
  public final static int ckapKeepAlivesDisabled = 3;

Default Value

0

Remarks

Use this property to tune-up the keep-alive mechanism as per the needs of your application.

KnownCertificates Property (OAuthClient Class)

Additional certificates for chain validation.

Syntax

public CertificateList getKnownCertificates();


public void setKnownCertificates(CertificateList knownCertificates);

Remarks

Use this property to supply a list of additional certificates that might be needed for chain validation. An example of a scenario where you might want to do that is when intermediary CA certificates are absent from the standard system locations (or when there are no standard system locations), and therefore should be supplied to the class manually.

The purpose of the certificates to be added to this collection is roughly equivalent to that of the Intermediate Certification Authorities system store in Windows.

Do not add trust anchors or root certificates to this collection: add them to TrustedCertificates instead.

This property is not available at design time.

Please refer to the Certificate type for a complete list of fields.

KnownCRLs Property (OAuthClient Class)

Additional CRLs for chain validation.

Syntax

public CRLList getKnownCRLs();


public void setKnownCRLs(CRLList knownCRLs);

Remarks

Use this property to supply additional CRLs that might be needed for chain validation. This property may be helpful when a chain is validated in offline mode, and the associated CRLs are stored separately from the signed message or document.

This property is not available at design time.

Please refer to the CRL type for a complete list of fields.

KnownOCSPs Property (OAuthClient Class)

Additional OCSP responses for chain validation.

Syntax

public OCSPResponseList getKnownOCSPs();


public void setKnownOCSPs(OCSPResponseList knownOCSPs);

Remarks

Use this property to supply additional OCSP responses that might be needed for chain validation. This property may be helpful when a chain is validated in offline mode, and the associated OCSP responses are stored separately from the signed message or document.

This property is not available at design time.

Please refer to the OCSPResponse type for a complete list of fields.

Password Property (OAuthClient Class)

The connecting user's authentication password.

Syntax

public String getPassword();


public void setPassword(String password);

Default Value

""

Remarks

Assign the user's authentication password to this property. Use Username for username/login. The Username and Password properties are used only when GrantType is oauthPasswordCredentials.

Proxy Property (OAuthClient Class)

The proxy server settings.

Syntax

public ProxySettings getProxy();

Remarks

Use this property to tune up the proxy server settings.

This property is read-only.

Please refer to the ProxySettings type for a complete list of fields.

RedirectURL Property (OAuthClient Class)

The URL where the user is redirected after authorization.

Syntax

public String getRedirectURL();


public void setRedirectURL(String redirectURL);

Default Value

""

Remarks

Use this property to specify the URL on which the local HTTP server should open the listening port and wait for response from the authorization server. When the port number is explicitly specified, e.g., "http://localhost:5050/", the application has to be allowed to open a listening socket on that port.

HTTPS redirects support

Services increasingly require that redirects are made to HTTPS-enabled endpoints (e.g. "https://localhost:5050/"). OAuthClient does support them, but you are expected to do a little tuneup to be able to handle them.

What you need to do is set up the TLS server certificate that the OAuth receiver will be presenting to the user's web browser. The certificate is an integral part of the TLS handshake process. You can provide the certificate to the component using the AddLocalServerCertificate or AddLocalServerCertificateFromFile actions. See DoAction for the details.

The provided TLS certificate must contain a matching private key. You can generate the certificate using the CertificateManager component, or third-party software such as OpenSSL. Note that some browsers no longer accept self-signed TLS certificates, which typically means that you need to generate and set up a pair of certificates (the self-signed root certificate and the subordinate web server certificate) to make your receiver work with such browsers.

RefreshToken Property (OAuthClient Class)

The refresh token, to be used to automatically obtain new access token.

Syntax

public String getRefreshToken();


public void setRefreshToken(String refreshToken);

Default Value

""

Remarks

The refresh token is used to obtain new AccessToken without user authentication.

Scope Property (OAuthClient Class)

The scope of the request to be authorized.

Syntax

public String getScope();


public void setScope(String scope);

Default Value

""

Remarks

Use this property to specify the scope of the request to the protected resource.

ServerChain Property (OAuthClient Class)

The TLS server's certificate chain.

Syntax

public CertificateList getServerChain();

Remarks

Use this property to access the certificate chain sent by the TLS server. This property is ready to read when OnCertificateValidate event is fired by the client component.

This property is read-only and not available at design time.

Please refer to the Certificate type for a complete list of fields.

SocketSettings Property (OAuthClient Class)

Manages network connection settings.

Syntax

public SocketSettings getSocketSettings();

Remarks

Use this property to tune up network connection parameters.

This property is read-only.

Please refer to the SocketSettings type for a complete list of fields.

State Property (OAuthClient Class)

Specifies the state parameter of the authorization request or response.

Syntax

public String getState();


public void setState(String state);

Default Value

""

Remarks

This parameter contains an opaque value used by the client to maintain state between the request and callback. If this parameter was present in the authorization request, the server should include the same value in its response.

SuccessResponse Property (OAuthClient Class)

The web page showed to the user by the class on authorization success.

Syntax

public String getSuccessResponse();


public void setSuccessResponse(String successResponse);

Default Value

""

Remarks

This property contains the html of the web page to be shown on authorization success.

Timeout Property (OAuthClient Class)

Specifies waiting timeout (in milliseconds).

Syntax

public int getTimeout();


public void setTimeout(int timeout);

Default Value

120000

Remarks

This property specifies the timeout (in milliseconds) to wait for server's response.

TLSSettings Property (OAuthClient Class)

Manages TLS layer settings.

Syntax

public TLSSettings getTLSSettings();

Remarks

Use this property to tune up the TLS layer parameters.

This property is read-only.

Please refer to the TLSSettings type for a complete list of fields.

TokenType Property (OAuthClient Class)

Returns the access token type.

Syntax

public String getTokenType();

Default Value

""

Remarks

The access token type provides a client with the information on how to use the AccessToken. The understanding of token type is the client's responsibility. Some token types are described, for instance, in RFC 6750 and OAuth-HTTP-MAC specifications.

This property is read-only and not available at design time.

TokenURL Property (OAuthClient Class)

Specifies the URL of the token endpoint.

Syntax

public String getTokenURL();


public void setTokenURL(String tokenURL);

Default Value

""

Remarks

The token endpoint is used by the client, which needs access to protected resource, to obtain access token from the authorization server.

TrustedCertificates Property (OAuthClient Class)

A list of trusted certificates for chain validation.

Syntax

public CertificateList getTrustedCertificates();


public void setTrustedCertificates(CertificateList trustedCertificates);

Remarks

Use this property to supply a list of trusted certificates that might be needed for chain validation. An example of a scenario where you might want to do that is when root CA certificates are absent from the standard system locations (or when there are no standard system locations), and therefore should be supplied to the component manually.

The purpose of this certificate collection is largely the same as that of the Windows Trusted Root Certification Authorities system store.

Use this property with extreme care as it directly affects chain verifiability; a wrong certificate added to the trusted list may result in bad chains being accepted, and forfeited signatures being recognized as genuine. Only add certificates that originate from the parties that you know and trust.

This property is not available at design time.

Please refer to the Certificate type for a complete list of fields.

Username Property (OAuthClient Class)

The connecting user's username (login name).

Syntax

public String getUsername();


public void setUsername(String username);

Default Value

""

Remarks

Assign the user's login name to this property. Use Password to provide the password. The Username and Password properties are used only when GrantType is oauthPasswordCredentials.

Authorize Method (Oauthclient Class)

Performs user authorization and gets an access token.

Syntax

public boolean authorize();

Remarks

Call this method to perform user authorization and get an access token. When the user completes authorization and its data is sent to the server, OAuthClient will fire the Wait event periodically, to show how much waiting time is left. Upon successful authorization, the AccessToken and ExpiresAt properties are filled.

Returns true if the authorization was granted, and false otherwise.

Config Method (Oauthclient Class)

Sets or retrieves a configuration setting.

Syntax

public String config(String configurationString);

Remarks

Config is a generic method available in every class. It is used to set and retrieve configuration settings for the class.

These settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the class, access to these internal properties is provided through the Config method.

To set a configuration setting named PROPERTY, you must call Config("PROPERTY=VALUE"), where VALUE is the value of the setting expressed as a string. For boolean values, use the strings "True", "False", "0", "1", "Yes", or "No" (case does not matter).

To read (query) the value of a configuration setting, you must call Config("PROPERTY"). The value will be returned as a string.

DoAction Method (Oauthclient Class)

Performs an additional action.

Syntax

public String doAction(String actionID, String actionParams);

Remarks

DoAction is a generic method available in every class. It is used to perform an additional action introduced after the product major release. The list of actions is not fixed, and may be flexibly extended over time.

The unique identifier (case insensitive) of the action is provided in the ActionID parameter.

ActionParams contains the value of a single parameter, or a list of multiple parameters for the action in the form of PARAM1=VALUE1;PARAM2=VALUE2;....

Error Event (Oauthclient Class)

Provides information about errors during authorization operations.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void error(OauthclientErrorEvent e) {}
  ...
}

public class OauthclientErrorEvent {
  public int errorCode;
  public String description;
}

Remarks

This event is fired in case of exceptional conditions occured during authorization operations.

ErrorCode contains an error code and Description contains a textual description of the error.

ExternalSign Event (Oauthclient Class)

Handles remote or external signing initiated by the SignExternal method or other source.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void externalSign(OauthclientExternalSignEvent e) {}
  ...
}

public class OauthclientExternalSignEvent {
  public String operationId;
  public String hashAlgorithm;
  public String pars;
  public String data;
  public String signedData;
}

Remarks

Assign a handler to this event if you need to delegate a low-level signing operation to an external, remote, or custom signing engine. Depending on the settings, the handler will receive a hashed or unhashed value to be signed.

The event handler must pass the value of Data to the signer, obtain the signature, and pass it back to the class via the SignedData parameter.

OperationId provides a comment about the operation and its origin. It depends on the exact class being used, and may be empty. HashAlgorithm specifies the hash algorithm being used for the operation, and Pars contains algorithm-dependent parameters.

The class uses base16 (hex) encoding for the Data, SignedData, and Pars parameters. If your signing engine uses a different input and output encoding, you may need to decode and/or encode the data before and/or after the signing.

A sample MD5 hash encoded in base16: a0dee2a0382afbb09120ffa7ccd8a152 - lower case base16 A0DEE2A0382AFBB09120FFA7CCD8A152 - upper case base16

A sample event handler that uses the .NET RSACryptoServiceProvider class may look like the following: signer.OnExternalSign += (s, e) => { var cert = new X509Certificate2("cert.pfx", "", X509KeyStorageFlags.Exportable); var key = (RSACryptoServiceProvider)cert.PrivateKey; var dataToSign = e.Data.FromBase16String(); var signedData = key.SignHash(dataToSign, "2.16.840.1.101.3.4.2.1"); e.SignedData = signedData.ToBase16String(); };

LaunchBrowser Event (Oauthclient Class)

Fires to show the login page to the end-user.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void launchBrowser(OauthclientLaunchBrowserEvent e) {}
  ...
}

public class OauthclientLaunchBrowserEvent {
  public String URL;
  public boolean handled;
}

Remarks

Subscribe to this event to respond to requests from the component to open the URL in the browser. Set Handled to true to report that the URL has been opened in the browser.

TLSCertNeeded Event (Oauthclient Class)

Fires when a remote TLS party requests a client certificate.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSCertNeeded(OauthclientTLSCertNeededEvent e) {}
  ...
}

public class OauthclientTLSCertNeededEvent {
  public String host;
  public String CANames;
}

Remarks

This event fires to notify the implementation that a remote TLS server has requested a client certificate. The Host parameter identifies the host that makes a request, and the CANames parameter (optional, according to the TLS spec) advises on the accepted issuing CAs.

Use the TLSClientChain property in response to this event to provide the requested certificate. Please make sure the client certificate includes the associated private key. Note that you may set the certificates before the connection without waiting for this event to fire.

This event is preceded by the TLSHandshake event for the given host and, if the certificate was accepted, succeeded by the TLSEstablished event.

TLSCertValidate Event (Oauthclient Class)

This event is fired upon receipt of the TLS server's certificate, allowing the user to control its acceptance.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSCertValidate(OauthclientTLSCertValidateEvent e) {}
  ...
}

public class OauthclientTLSCertValidateEvent {
  public String serverHost;
  public String serverIP;
  public boolean accept;
}

Remarks

This event is fired during a TLS handshake. Use the TLSServerChain property to access the certificate chain. In general, classes may contact a number of TLS endpoints during their work, depending on their configuration.

Accept is assigned in accordance with the outcome of the internal validation check performed by the class, and can be adjusted if needed.

TLSEstablished Event (Oauthclient Class)

Fires when a TLS handshake with Host successfully completes.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSEstablished(OauthclientTLSEstablishedEvent e) {}
  ...
}

public class OauthclientTLSEstablishedEvent {
  public String host;
  public String version;
  public String ciphersuite;
  public byte[] connectionId;
  public boolean abort;
}

Remarks

The class uses this event to notify the application about a successful completion of a TLS handshake.

The Version, Ciphersuite, and ConnectionId parameters indicate the security parameters of the new connection. Use the Abort parameter if you need to terminate the connection at this stage.

TLSHandshake Event (Oauthclient Class)

Fires when a new TLS handshake is initiated, before the handshake commences.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSHandshake(OauthclientTLSHandshakeEvent e) {}
  ...
}

public class OauthclientTLSHandshakeEvent {
  public String host;
  public boolean abort;
}

Remarks

The class uses this event to notify the application about the start of a new TLS handshake to Host. If the handshake is successful, this event will be followed by the TLSEstablished event. If the server chooses to request a client certificate, the TLSCertNeeded event will also be fired.

TLSPSK Event (Oauthclient Class)

Notifies the application about the PSK key exchange.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSPSK(OauthclientTLSPSKEvent e) {}
  ...
}

public class OauthclientTLSPSKEvent {
  public String host;
  public String hint;
}

Remarks

The class fires this event to notify the application about the beginning of TLS-PSK key exchange with Host. The Hint parameter may be used by the server to identify the key or service to use. Use the PreSharedKey field of TLSSettings to provide the pre-shared key to the component.

TLSShutdown Event (Oauthclient Class)

Reports the graceful closure of a TLS connection.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void TLSShutdown(OauthclientTLSShutdownEvent e) {}
  ...
}

public class OauthclientTLSShutdownEvent {
  public String host;
}

Remarks

This event notifies the application about the closure of an earlier established TLS connection. Note that only graceful connection closures are reported.

Wait Event (Oauthclient Class)

Fired periodically to show how much waiting time is left.

Syntax

public class DefaultOauthclientEventListener implements OauthclientEventListener {
  ...
  public void wait(OauthclientWaitEvent e) {}
  ...
}

public class OauthclientWaitEvent {
  public int timeLeft;
  public boolean stop;
}

Remarks

This event is fired after authorization is started, to show how much time is left to wait for server's response. Waiting can be cancelled by setting the Stop parameter to true, which will result in authorization failure.

Certificate Type

Provides details of an individual X.509 certificate.

Remarks

This type provides access to X.509 certificate details.

Fields

Constructors

public Certificate( bytes,  startIndex,  count,  password);

Loads the X.509 certificate from a memory buffer. Bytes is a buffer containing the raw certificate data. StartIndex and Count specify the starting position and number of bytes to be read from the buffer, respectively. Password is a password encrypting the certificate.

public Certificate( certBytes,  certStartIndex,  certCount,  keyBytes,  keyStartIndex,  keyCount,  password);

Loads the X.509 certificate from a memory buffer. CertBytes is a buffer containing the raw certificate data. CertStartIndex and CertCount specify the number of bytes to be read from the buffer, respectively. KeyBytes is a buffer containing the private key data. KeyStartIndex and KeyCount specify the starting position and number of bytes to be read from the buffer, respectively. Password is a password encrypting the certificate.

public Certificate( bytes,  startIndex,  count);

Loads the X.509 certificate from a memory buffer. Bytes is a buffer containing the raw certificate data. StartIndex and Count specify the starting position and number of bytes to be read from the buffer, respectively.

public Certificate( path,  password);

Loads the X.509 certificate from a file. Path specifies the full path to the file containing the certificate data. Password is a password encrypting the certificate.

public Certificate( certPath,  keyPath,  password);

Loads the X.509 certificate from a file. CertPath specifies the full path to the file containing the certificate data. KeyPath specifies the full path to the file containing the private key. Password is a password encrypting the certificate.

public Certificate( path);

Loads the X.509 certificate from a file. Path specifies the full path to the file containing the certificate data.

public Certificate( stream);

Loads the X.509 certificate from a stream. Stream is a stream containing the certificate data.

public Certificate( stream,  password);

Loads the X.509 certificate from a stream. Stream is a stream containing the certificate data. Password is a password encrypting the certificate.

public Certificate( certStream,  keyStream,  password);

Loads the X.509 certificate from a stream. CertStream is a stream containing the certificate data. KeyStream is a stream containing the private key. Password is a password encrypting the certificate.

public Certificate();

Creates a new object with default field values.

ConnectionInfo Type

Contains information about a network connection.

Remarks

Use this property to check various details of the network connection. These include the total amounts of data transferred, the availability of TLS, and its parameters.

Fields

Constructors

public ConnectionInfo();

Creates a new ConnectionInfo object.

CRL Type

Represents a Certificate Revocation List.

Remarks

CRLs store information about revoked certificates, i.e., certificates that have been identified as invalid by their issuing certificate authority (CA) for any number of reasons.

Each CRL object lists certificates from a single CA and identifies them by their serial numbers. A CA may or may not publish a CRL, may publish several CRLs, or may publish the same CRL in multiple locations.

Unlike OCSP responses, CRLs only list certificates that have been revoked. They do not list certificates that are still valid.

Fields

Constructors

public CRL( bytes,  startIndex,  count);

Creates a CRL object from a memory buffer. Bytes is a buffer containing raw (DER) CRL data, StartIndex and Count specify the starting position and the length of the CRL data in the buffer, respectively.

public CRL( location);

Creates a CRL object by downloading it from a remote location.

public CRL( stream);

Creates a CRL object from data contained in a stream.

public CRL();

Creates an empty CRL object.

ExternalCrypto Type

Specifies the parameters of external cryptographic calls.

Remarks

External cryptocalls are used in a Distributed Cryptography (DC) subsystem, which allows the delegation of security operations to the remote agent. For instance, it can be used to compute the signature value on the server, while retaining the client's private key locally.

Fields

Constructors

public ExternalCrypto();

Creates a new ExternalCrypto object with default field values.

OCSPResponse Type

Represents a single OCSP response originating from an OCSP responder.

Remarks

OCSP is a protocol that allows verification of certificate status in real-time, and is an alternative to Certificate Revocation Lists (CRLs).

An OCSP response is a snapshot of the certificate status at a given time.

Fields

Constructors

public OCSPResponse( bytes,  startIndex,  count);

Initializes the response from a memory buffer. Bytes is a buffer containing raw OCSP response data, StartIndex and Count specify the starting position and the number of bytes to be read from this buffer.

public OCSPResponse( location);

Downloads an OCSP response from a remote location.

public OCSPResponse( stream);

Initializes the response with the data from a stream.

public OCSPResponse();

Creates an empty OCSP response object.

ProxySettings Type

A container for proxy server settings.

Remarks

This type exposes a collection of properties for tuning up the proxy server configuration.

Fields

Constructors

public ProxySettings();

Creates a new ProxySettings object.

SocketSettings Type

A container for the socket settings.

Remarks

This type is a container for socket-layer parameters.

Fields

Constructors

public SocketSettings();

Creates a new SocketSettings object.

StringNameValuePair Type

A simple name-value pair object.

Remarks

The class represents a name-value string pair used in a variety of network components.

Fields

Constructors

public StringNameValuePair( name,  value);

Creates a name-value pair from a name and a value.

public StringNameValuePair();

Creates an empty name-value object.

TLSSettings Type

A container for TLS connection settings.

Remarks

The TLS (Transport Layer Security) protocol provides security for information exchanged over insecure connections such as TCP/IP.

Fields

Constructors

public TLSSettings();

Creates a new TLSSettings object.

Config Settings (Oauthclient Class)

The class accepts one or more of the following configuration settings. Configuration settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the class, access to these internal properties is provided through the Config method.

OAuthClient Config Settings

Base Config Settings

Trappable Errors (Oauthclient Class)