--- title: SAIF.NetCore.OIDC API reference summary: Index of all public types in this library. status: draft owner: SAIF Framework Platform Team last_reviewed: 2026-10-02 library: SAIF.NetCore.OIDC reference_type: package --- # SAIF.NetCore.OIDC API reference This page lists all public types exposed by `SAIF.NetCore.OIDC`. Each type links to its full API reference page. ## Types | Type | Kind | Namespace | Purpose | | --- | --- | --- | --- | | [Constants](saif.netcore.oidc/constants.md) | Static class | `SAIF.NetCore.OIDC` | Environment-setting key names for section `NetCore_OIDC`. | | [RefreshTokenResult](saif.netcore.oidc.contracts/refreshtokenresult.md) | DTO | `SAIF.NetCore.OIDC.Contracts` | Deserialization target for the Okta token-refresh response. | | [HttpContextAuthenticateException](saif.netcore.oidc.exceptions/httpcontextauthenticateexception.md) | Exception | `SAIF.NetCore.OIDC.Exceptions` | Thrown when cookie re-authentication fails during JWT claim synchronization. | | [JwtRefreshException](saif.netcore.oidc.exceptions/jwtrefreshexception.md) | Exception | `SAIF.NetCore.OIDC.Exceptions` | Thrown when a token-refresh call to Okta fails. | | [MissingDataProtectionCertificateException](saif.netcore.oidc.exceptions/missingdataprotectioncertificateexception.md) | Exception | `SAIF.NetCore.OIDC.Exceptions` | Thrown when the configured data-protection certificate cannot be found on a non-developer machine. | | [ClaimsPrincipalExtensions](saif.netcore.oidc.extensions/claimsprincipalextensions.md) | Static extensions | `SAIF.NetCore.OIDC.Extensions` | Claim add/replace helper used when synchronizing JWT values into claims. | | [HttpContextExtensions](saif.netcore.oidc.extensions/httpcontextextensions.md) | Static extensions | `SAIF.NetCore.OIDC.Extensions` | Cookie rewriting and mixed-case URL detection helpers. | | [JwtClaimMiddleware](saif.netcore.oidc.middleware/jwtclaimmiddleware.md) | Middleware (`IMiddleware`) | `SAIF.NetCore.OIDC.Middleware` | Synchronizes `id_token`/`access_token` claims and re-signs the auth cookie on every authenticated request. | | [LowerCaseUrlMiddleware](saif.netcore.oidc.middleware/lowercaseurlmiddleware.md) | Middleware (`IMiddleware`) | `SAIF.NetCore.OIDC.Middleware` | Permanently redirects mixed-case URLs to a lower-cased form. | | [RefreshJwtMiddleware](saif.netcore.oidc.middleware/refreshjwtmiddleware.md) | Middleware (`IMiddleware`) | `SAIF.NetCore.OIDC.Middleware` | Redirects requests with an expired access token to the token-refresh application. | | [ConfigureCookieAuthenticationOptions](saif.netcore.oidc.options/configurecookieauthenticationoptions.md) | Options configurator (`IConfigureNamedOptions`) | `SAIF.NetCore.OIDC.Options` | Configures the `"Cookies"` authentication scheme. | | [ConfigureOpenIdConnectOptions](saif.netcore.oidc.options/configureopenidconnectoptions.md) | Options configurator (`IConfigureNamedOptions`) | `SAIF.NetCore.OIDC.Options` | Configures the `"OpenIdConnect"` authentication scheme against Okta. | | [ClaimTransformationCacheService](saif.netcore.oidc.services/claimtransformationcacheservice.md) | Service (`IClaimTransformCacheService`) | `SAIF.NetCore.OIDC.Services` | Tracks how recently a subject's roles were transformed. | | [DataProtectionCertService](saif.netcore.oidc.services/dataprotectioncertservice.md) | Service (`IDataProtectionCertService`) | `SAIF.NetCore.OIDC.Services` | Resolves the data-protection certificate from the local certificate store. | | [JwtAuthorizationCookieClaimService](saif.netcore.oidc.services/jwtauthorizationcookieclaimservice.md) | Service (`IJwtAuthorizationCookieClaimService`) | `SAIF.NetCore.OIDC.Services` | Rewrites the auth cookie and updates JWT token-value claims. | | [JwtRefreshService](saif.netcore.oidc.services/jwtrefreshservice.md) | Service (`IJwtRefreshService`) | `SAIF.NetCore.OIDC.Services` | Exchanges a refresh token for a new access/ID token pair at Okta. | | [LoginRedirectService](saif.netcore.oidc.services/loginredirectservice.md) | Service (`ILoginRedirectService`) | `SAIF.NetCore.OIDC.Services` | Builds and issues the HTTPS redirect to the login application. | | [OidcSettings](saif.netcore.oidc.services/oidcsettings.md) | Service (`IOidcSettings`) | `SAIF.NetCore.OIDC.Services` | Resolves every OIDC setting from Environment API section `NetCore_OIDC`. | | [RoleClaimService](saif.netcore.oidc.services/roleclaimservice.md) | Service (`IRoleClaimService`) | `SAIF.NetCore.OIDC.Services` | Adds `ClaimTypes.Role` claims matching the configured role-claim identifier. | | [RoleClaimTransformer](saif.netcore.oidc.services/roleclaimtransformer.md) | Claims transformation (`IClaimsTransformation`) | `SAIF.NetCore.OIDC.Services` | Entry point for role-claim transformation; not registered as `IClaimsTransformation` by any consumer in this repo. | | [UrlCaseService](saif.netcore.oidc.services/urlcaseservice.md) | Service (`IUrlCaseService`) | `SAIF.NetCore.OIDC.Services` | Detects and redirects mixed-case URLs. | ## Sources - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/SAIF.NetCore.OIDC.csproj` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Constants.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Contracts/RefreshTokenResult.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Exceptions/HttpContextAuthenticateException.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Exceptions/JwtRefreshException.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Exceptions/MissingDataProtectionCertificateException.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Extensions/ClaimsPrincipalExtensions.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Extensions/HttpContextExtensions.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Middleware/JwtClaimMiddleware.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Middleware/LowerCaseUrlMiddleware.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Middleware/RefreshJwtMiddleware.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Options/ConfigureCookieAuthenticationOptions.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Options/ConfigureOpenIdConnectOptions.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/ClaimTransformationCacheService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/DataProtectionCertService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/JwtAuthorizationCookieClaimService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/JwtRefreshService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/LoginRedirectService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/OidcSettings.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/RoleClaimService.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/RoleClaimTransformer.cs` - `src/SAIF.NetCore.OIDC/src/SAIF.NetCore.OIDC/Services/UrlCaseService.cs`