Skip to main content

ClientDto

Namespace: Meshmakers.Octo.Communication.Contracts.DataTransferObjects

Data Transfer Object of a Octo client

public class ClientDto

Inheritance Object → ClientDto

Properties​

RtId​

Runtime ID (RtId) of the client entity. Read-only — populated on read, ignored on write. Used to identify the client as a group member (AB#4183).

public string RtId { get; set; }

Property Value​

String

IsEnabled​

Specifies if client is enabled

public Nullable<bool> IsEnabled { get; set; }

Property Value​

Nullable<Boolean>

ClientId​

Unique ID of the client

public string ClientId { get; set; }

Property Value​

String

ClientSecret​

Optional client secret

public string ClientSecret { get; set; }

Property Value​

String

RequireClientSecret​

Specifies if a client secret is required to request tokens

public Nullable<bool> RequireClientSecret { get; set; }

Property Value​

Nullable<Boolean>

ClientName​

Client display name (used for logging and consent screen)

public string ClientName { get; set; }

Property Value​

String

ClientUri​

URI to further information about client (used on consent screen)

public string ClientUri { get; set; }

Property Value​

String

AllowedGrantTypes​

Specifies the allowed grant types (legal combinations of AuthorizationCode, Implicit, Hybrid, ResourceOwner, ClientCredentials).

public IEnumerable<string> AllowedGrantTypes { get; set; }

Property Value​

IEnumerable<String>

RedirectUris​

Specifies allowed URIs to return tokens or authorization codes to

public IEnumerable<string> RedirectUris { get; set; }

Property Value​

IEnumerable<String>

PostLogoutRedirectUris​

Specifies allowed URIs to redirect to after logout

public IEnumerable<string> PostLogoutRedirectUris { get; set; }

Property Value​

IEnumerable<String>

AllowedCorsOrigins​

Gets or sets the allowed CORS origins for JavaScript clients.

public IEnumerable<string> AllowedCorsOrigins { get; set; }

Property Value​

IEnumerable<String>

AllowedScopes​

Specifies the api scopes that the client is allowed to request

public IEnumerable<string> AllowedScopes { get; set; }

Property Value​

IEnumerable<String>

IsOfflineAccessEnabled​

Specifies if offline access to use code_authorization is enabled

public Nullable<bool> IsOfflineAccessEnabled { get; set; }

Property Value​

Nullable<Boolean>

FrontChannelLogoutUri​

Specifies the front-channel logout URI for Single Logout (SLO). The Identity Server will load this URI in an iframe during logout.

public string FrontChannelLogoutUri { get; set; }

Property Value​

String

FrontChannelLogoutSessionRequired​

Specifies whether session ID is required for front-channel logout.

public Nullable<bool> FrontChannelLogoutSessionRequired { get; set; }

Property Value​

Nullable<Boolean>

BackChannelLogoutUri​

Specifies the back-channel logout URI for Single Logout (SLO). The Identity Server will POST a logout token to this URI.

public string BackChannelLogoutUri { get; set; }

Property Value​

String

BackChannelLogoutSessionRequired​

Specifies whether session ID is required for back-channel logout.

public Nullable<bool> BackChannelLogoutSessionRequired { get; set; }

Property Value​

Nullable<Boolean>

AutoProvisionInChildTenants​

When true and this is a ClientCredentials client living in a parent tenant, every new child tenant gets a mirror of this client auto-provisioned. Enables a single ClientCredentials identity (typically a CI/CD agent) to reach every tenant on the instance without per-tenant manual setup. Defaults to false.

public Nullable<bool> AutoProvisionInChildTenants { get; set; }

Property Value​

Nullable<Boolean>

ProvisionedByParentTenantId​

When set, this client is a mirror provisioned from the named parent tenant. Sub-tenant UIs surface this as a read-only "Provisioned by parent tenant" indicator; the client must not be edited locally because the next sync would overwrite the change. null on locally-owned clients.

public string ProvisionedByParentTenantId { get; set; }

Property Value​

String

DynamicRegistration​

When true, this client was self-registered via RFC 7591 Dynamic Client Registration (client id prefix octo-dcr-). Such clients are server-managed and expire automatically. Read-only: populated on read, ignored on write (the identity service never accepts it from a caller).

public Nullable<bool> DynamicRegistration { get; set; }

Property Value​

Nullable<Boolean>

DynamicRegistrationExpiresAt​

Expiry of a dynamically-registered client (registration time + TTL). After this moment the identity service treats the client as gone and the cleanup job erases it together with its per-tenant mirrors. null on regular clients. Read-only: populated on read, ignored on write.

public Nullable<DateTime> DynamicRegistrationExpiresAt { get; set; }

Property Value​

Nullable<DateTime>

Constructors​

ClientDto()​

public ClientDto()