Class CloudUploadSessionTokenService

Issues and validates CloudUploadSession tokens.

Built on ASP.NET Core Data Protection, so key management, rotation and isolation are handled by the framework rather than by a hand-rolled HMAC. In a multi-server deployment the data protection keyring must be shared, exactly as it must be for antiforgery tokens.

Inheritance

object

CloudUploadSessionTokenService

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: CoreUpload.Security

Assembly: CoreUpload.dll

Syntax

public sealed class CloudUploadSessionTokenService

Constructors

CloudUploadSessionTokenService(IDataProtectionProvider, TimeSpan?)

Declaration

public CloudUploadSessionTokenService(IDataProtectionProvider provider, TimeSpan? lifetime = null)

Parameters

Type	Name	Description
IDataProtectionProvider	provider
TimeSpan?	lifetime

Methods

Issue(string, string, long)

Issues a token for an upload the server has just opened.

Declaration

public string Issue(string uploadId, string key, long declaredSize)

Parameters

Type	Name	Description
string	uploadId
string	key
long	declaredSize

Returns

Type	Description
string

Validate(string?)

Validates a token. Returns null if it is missing, tampered with, issued for another purpose or application, or expired.

Declaration

public CloudUploadSession? Validate(string? token)

Parameters

Type	Name	Description
string	token

Returns

Type	Description
CloudUploadSession