Skip to main content

CertificateFileCredentialProvider

  • Namespace: PPDS.Auth.Credentials
  • Assembly: PPDS.Auth
  • Kind: Class
  • Implements: ICredentialProvider, IDisposable

Summary​

Provides authentication using a certificate file (PFX/P12).

Members​

Constructors​

CertificateFileCredentialProvider(string applicationId, string certificatePath, string certificatePassword, string tenantId, CloudEnvironment cloud)​

CertificateFileCredentialProvider(string applicationId, string certificatePath, string certificatePassword, string tenantId, CloudEnvironment cloud)

Creates a new certificate file credential provider.

  • Param applicationId: The application (client) ID.

  • Param certificatePath: Path to the certificate file (PFX/P12).

  • Param certificatePassword: Password for the certificate file (optional).

  • Param tenantId: The tenant ID.

  • Param cloud: The cloud environment.

Methods​

CreateServiceClientAsync​

Task<ServiceClient> CreateServiceClientAsync(string environmentUrl, CancellationToken cancellationToken, bool forceInteractive)

Creates an authenticated ServiceClient for the specified environment URL.

  • Param environmentUrl: The Dataverse environment URL.

  • Param cancellationToken: Cancellation token.

  • Param forceInteractive: If true, skip silent auth and prompt user directly. Use for profile creation.

  • Returns: An authenticated ServiceClient.

Dispose​

void Dispose()

(inherited from System.IDisposable.Dispose)

FromProfile​

CertificateFileCredentialProvider FromProfile(AuthProfile profile, StoredCredential credential)

Creates a provider from an auth profile and credential from secure store.

  • Param profile: The auth profile.

  • Param credential: The credential containing the certificate password.

  • Returns: A new provider instance.

FromProfileWithPassword​

CertificateFileCredentialProvider FromProfileWithPassword(AuthProfile profile, string certificatePassword)

Creates a provider from an auth profile with explicit certificate password.

  • Param profile: The auth profile.

  • Param certificatePassword: The certificate password (optional).

  • Returns: A new provider instance.

GetCachedTokenInfoAsync​

Task<CachedTokenInfo> GetCachedTokenInfoAsync(string environmentUrl, CancellationToken cancellationToken)

Gets cached token information without triggering interactive authentication. Queries the MSAL token cache to determine current token state.

  • Param environmentUrl: The Dataverse environment URL to check token for.

  • Param cancellationToken: Cancellation token.

  • Returns: Token information if a valid cached token exists, null if token is expired or not cached.

Properties​

AccessToken​

string AccessToken { get; }

Gets the access token from the last authentication. Available after successful authentication. Used for extracting JWT claims.

AuthMethod​

AuthMethod AuthMethod { get; }

Gets the authentication method this provider handles.

HomeAccountId​

string HomeAccountId { get; }

Gets the MSAL home account identifier. Format: {objectId}.{tenantId} - uniquely identifies the account+tenant for token cache lookup. Available after successful authentication.

IdTokenClaims​

ClaimsPrincipal IdTokenClaims { get; }

Gets the ID token claims from the last authentication (if available). The ID token typically contains user claims like country that aren't in the access token.

Identity​

string Identity { get; }

Gets the identity string for display (e.g., username or app ID). Available after successful authentication.

ObjectId​

string ObjectId { get; }

Gets the Entra Object ID (OID) from the authentication result. Available after successful authentication.

TenantId​

string TenantId { get; }

Gets the tenant ID from the authentication result. Available after successful authentication.

TokenExpiresAt​

Nullable<DateTimeOffset> TokenExpiresAt { get; }

Gets the token expiration time. Available after successful authentication.