TsgcHTTP_OAuth2_Client › Events

TsgcHTTP_OAuth2_Client Events

Events you can handle, grouped by purpose, followed by the full alphabetical list.

Authorize Code

Name	Description
OnBeforeAuthorizeCode	Fires before the client opens the browser to request user authorization.
OnAfterAuthorizeCode	Fires when the authorization server redirects back with the authorization code.
OnErrorAuthorizeCode	Fires when the authorization server returns an error during the authorization code step.

Access Token

Name	Description
OnBeforeAccessToken	Fires before the client posts to the token endpoint to exchange the code for an access token.
OnAfterAccessToken	Fires when the token endpoint returns a successful access-token response.
OnErrorAccessToken	Fires when the token endpoint rejects the access-token request.

Refresh Token

Name	Description
OnBeforeRefreshToken	Fires before the client posts to the token endpoint to redeem the refresh token.
OnAfterRefreshToken	Fires when the token endpoint returns a new access token from a refresh_token grant.
OnErrorRefreshToken	Fires when the token endpoint rejects the refresh_token grant.

Revoke Token

Name	Description
OnBeforeRevokeToken	Fires before the client posts to the revocation endpoint (RFC 7009).
OnAfterRevokeToken	Fires after the revocation endpoint successfully invalidates the token.
OnErrorRevokeToken	Fires when the revocation endpoint returns an error.

Introspect Token

Name	Description
OnBeforeIntrospectToken	Fires before the client posts to the introspection endpoint (RFC 7662).
OnAfterIntrospectToken	Fires after the introspection endpoint returns the token metadata.
OnErrorIntrospectToken	Fires when the introspection endpoint returns an error.

Device Code

Name	Description
OnDeviceCode	Fires when the Device Code flow issues the user code that must be entered on a secondary device (RFC 8628).
OnDeviceCodeExpired	Fires when the device code expires before the user completes authorization.

DPoP

Name	Description
OnDPoPSign	Fires when a DPoP proof needs to be signed, allowing the application to override the default signing implementation.

HTTP

Name	Description
OnHTTPResponse	Fires just before the local HTTP server sends the browser-facing response after the authorization redirect.

All Events (alphabetical)

Name	Description
OnAfterAccessToken	Fires when the token endpoint returns a successful access-token response.
OnAfterAuthorizeCode	Fires when the authorization server redirects back with the authorization code.
OnAfterIntrospectToken	Fires after the introspection endpoint returns the token metadata.
OnAfterRefreshToken	Fires when the token endpoint returns a new access token from a refresh_token grant.
OnAfterRevokeToken	Fires after the revocation endpoint successfully invalidates the token.
OnBeforeAccessToken	Fires before the client posts to the token endpoint to exchange the code for an access token.
OnBeforeAuthorizeCode	Fires before the client opens the browser to request user authorization.
OnBeforeIntrospectToken	Fires before the client posts to the introspection endpoint (RFC 7662).
OnBeforeRefreshToken	Fires before the client posts to the token endpoint to redeem the refresh token.
OnBeforeRevokeToken	Fires before the client posts to the revocation endpoint (RFC 7009).
OnDeviceCode	Fires when the Device Code flow issues the user code that must be entered on a secondary device (RFC 8628).
OnDeviceCodeExpired	Fires when the device code expires before the user completes authorization.
OnDPoPSign	Fires when a DPoP proof needs to be signed, allowing the application to override the default signing implementation.
OnErrorAccessToken	Fires when the token endpoint rejects the access-token request.
OnErrorAuthorizeCode	Fires when the authorization server returns an error during the authorization code step.
OnErrorIntrospectToken	Fires when the introspection endpoint returns an error.
OnErrorRefreshToken	Fires when the token endpoint rejects the refresh_token grant.
OnErrorRevokeToken	Fires when the revocation endpoint returns an error.
OnHTTPResponse	Fires just before the local HTTP server sends the browser-facing response after the authorization redirect.