Push Before Going Complex

Author: mckaragoz

samples/blazor-server/CodeBeam.UltimateAuth.Sample.BlazorServer/Components/Pages/Home.razor

@@ -7,6 +7,7 @@
 @using CodeBeam.UltimateAuth.Server.Abstractions
 @using CodeBeam.UltimateAuth.Server.Cookies
 @using CodeBeam.UltimateAuth.Server.Infrastructure
+@using CodeBeam.UltimateAuth.Server.Services
 @inject IUAuthFlowService<UserId> Flow
 @inject ISnackbar Snackbar
 @inject ISessionQueryService<UserId> SessionQuery

src/CodeBeam.UltimateAuth.Client/Components/UALoginForm.razor

@@ -1,14 +1,17 @@
 @* TODO: Optional double-submit prevention for native form submit *@
 @namespace CodeBeam.UltimateAuth.Client
 @using CodeBeam.UltimateAuth.Client.Options
+@using CodeBeam.UltimateAuth.Core.Options
 @using Microsoft.Extensions.Options
 @inject IJSRuntime JS
+@inject IOptions<UAuthOptions> CoreOptions
 @inject IOptions<UAuthClientOptions> Options
 @inject NavigationManager Navigation
 
 <form @ref="_form" method="post" action="@ResolvedEndpoint">
     <input type="hidden" name="Identifier" value="@Identifier" />
     <input type="hidden" name="Secret" value="@Secret" autocomplete="off" />
+    <input type="hidden" name="__uauth_client_profile" value="@ClientProfileValue" />
 
     @ChildContent
 

src/CodeBeam.UltimateAuth.Client/Components/UALoginForm.razor.cs

@@ -1,4 +1,5 @@
 using CodeBeam.UltimateAuth.Client.Infrastructure;
+using CodeBeam.UltimateAuth.Core.Options;
 using Microsoft.AspNetCore.Components;
 using Microsoft.JSInterop;
 
@@ -34,7 +35,7 @@ public async Task SubmitAsync()
             await JS.InvokeVoidAsync("uauth.submitForm", _form);
         }
 
-        //private string ResolvedEndpoint => string.IsNullOrWhiteSpace(Endpoint) ? UAuthUrlBuilder.Combine(Options.Value.Endpoints.Authority, "/auth/login") : UAuthUrlBuilder.Combine(Options.Value.Endpoints.Authority, Endpoint);
+        private string ClientProfileValue => CoreOptions.Value.ClientProfile.ToString();
 
         private string ResolvedEndpoint
         {

src/CodeBeam.UltimateAuth.Core/Abstractions/Infrastructure/IRefreshTokenResolver.cs

@@ -7,9 +7,9 @@
     /// </summary>
     public interface IUAuthService<TUserId>
     {
-        IUAuthFlowService<TUserId> Flow { get; }
+        //IUAuthFlowService<TUserId> Flow { get; }
         IUAuthSessionService<TUserId> Sessions { get; }
-        IUAuthTokenService<TUserId> Tokens { get; }
+        //IUAuthTokenService<TUserId> Tokens { get; }
         IUAuthUserService<TUserId> Users { get; }
     }
 }

src/CodeBeam.UltimateAuth.Core/Abstractions/Services/IUAuthService.cs

@@ -0,0 +1,26 @@
+namespace CodeBeam.UltimateAuth.Core.Abstractions
+{
+    /// <summary>
+    /// Optional persistence for access token identifiers (jti).
+    /// Used for revocation and replay protection.
+    /// </summary>
+    public interface IAccessTokenIdStore
+    {
+        Task StoreAsync(
+            string? tenantId,
+            string jti,
+            DateTimeOffset expiresAt,
+            CancellationToken ct = default);
+
+        Task<bool> IsRevokedAsync(
+            string? tenantId,
+            string jti,
+            CancellationToken ct = default);
+
+        Task RevokeAsync(
+            string? tenantId,
+            string jti,
+            DateTimeOffset revokedAt,
+            CancellationToken ct = default);
+    }
+}

src/CodeBeam.UltimateAuth.Core/Abstractions/Stores/IAccessTokenIdStore.cs

@@ -0,0 +1,38 @@
+using CodeBeam.UltimateAuth.Core.Domain;
+
+namespace CodeBeam.UltimateAuth.Core.Abstractions;
+
+/// <summary>
+/// Low-level persistence abstraction for refresh tokens.
+/// NO validation logic. NO business rules.
+/// </summary>
+public interface IRefreshTokenStore<TUserId>
+{
+    Task StoreAsync(string? tenantId,
+        StoredRefreshToken<TUserId> token,
+        CancellationToken ct = default);
+
+    Task<StoredRefreshToken<TUserId>?> FindByHashAsync(string? tenantId,
+        string tokenHash,
+        CancellationToken ct = default);
+
+    Task RevokeAsync(string? tenantId,
+        string tokenHash,
+        DateTimeOffset revokedAt,
+        CancellationToken ct = default);
+
+    Task RevokeBySessionAsync(string? tenantId,
+        AuthSessionId sessionId,
+        DateTimeOffset revokedAt,
+        CancellationToken ct = default);
+
+    Task RevokeByChainAsync(string? tenantId,
+        ChainId chainId,
+        DateTimeOffset revokedAt,
+        CancellationToken ct = default);
+
+    Task RevokeAllForUserAsync(string? tenantId,
+        TUserId userId,
+        DateTimeOffset revokedAt,
+        CancellationToken ct = default);
+}