Table of Contents

TExternalLoginEndpoint.IssueUpstreamChallenge Method

Starts an upstream challenge for an already-resolved provider against an existing login transaction: generates PKCE/state/nonce, persists the single-use external auth state bound to Tid, stores the sphinx.external cookie that binds the callback to this browser, and redirects to the upstream authorization endpoint. Shared by this endpoint and the transparent broker redirect so the challenge is built the same way regardless of how the flow was triggered. The external auth state is bounded by AClient's login timeouts (falling back to the global defaults) so it expires consistently with the login transaction.

Syntax

Unit: Sphinx.Endpoints.ExternalLogin

class procedure TExternalLoginEndpoint.IssueUpstreamChallenge(AHandler: TXDataRequestHandler; const Provider: IExternalProvider; const AClient: IClientFacade; const Tid: string; ForceLogin: Boolean); static;

Parameters

<-> Parameter Type Description
AHandler TXDataRequestHandler
const Provider IExternalProvider
const AClient IClientFacade
const Tid string
ForceLogin Boolean

See also