diff options
Diffstat (limited to 'src/DotNetOpenAuth')
| -rw-r--r-- | src/DotNetOpenAuth/OAuthWrap/StandardAccessTokenAnalyzer.cs | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth/OAuthWrap/StandardAccessTokenAnalyzer.cs b/src/DotNetOpenAuth/OAuthWrap/StandardAccessTokenAnalyzer.cs index 3cd138c..be495e0 100644 --- a/src/DotNetOpenAuth/OAuthWrap/StandardAccessTokenAnalyzer.cs +++ b/src/DotNetOpenAuth/OAuthWrap/StandardAccessTokenAnalyzer.cs @@ -46,6 +46,10 @@ namespace DotNetOpenAuth.OAuthWrap { /// <returns> /// A value indicating whether this access token is valid. /// </returns> + /// <remarks> + /// This method also responsible to throw a <see cref="ProtocolException"/> or return + /// <c>false</c> when the access token is expired, invalid, or from an untrusted authorization server. + /// </remarks> public bool TryValidateAccessToken(IDirectedProtocolMessage message, string accessToken, out string user, out string scope) { var accessTokenFormatter = AccessToken.CreateFormatter(this.AuthorizationServerPublicSigningKey, this.ResourceServerPrivateEncryptionKey); var token = accessTokenFormatter.Deserialize(message, accessToken); |