TExternalLoginEndpoint.IssueUpstreamChallenge Method
Starts an upstream challenge for an already-resolved provider against an existing login transaction: generates PKCE/state/nonce, persists the single-use external auth state bound to Tid, stores the sphinx.external cookie that binds the callback to this browser, and redirects to the upstream authorization endpoint. Shared by this endpoint and the transparent broker redirect so the challenge is built the same way regardless of how the flow was triggered. The external auth state is bounded by AClient's login timeouts (falling back to the global defaults) so it expires consistently with the login transaction.
Syntax
Unit: Sphinx.Endpoints.ExternalLogin
class procedure TExternalLoginEndpoint.IssueUpstreamChallenge(AHandler: TXDataRequestHandler; const Provider: IExternalProvider; const AClient: IClientFacade; const Tid: string; ForceLogin: Boolean); static;
Parameters
| <-> | Parameter | Type | Description |
|---|---|---|---|
| AHandler | TXDataRequestHandler | ||
| const | Provider | IExternalProvider | |
| const | AClient | IClientFacade | |
| const | Tid | string | |
| ForceLogin | Boolean |