Skip to content

Picket.Security API

Generated from XML documentation for Picket.Security.

Picket.Security.CrashDiagnosticWriter

Writes bounded crash diagnostics without exposing exception messages or stack traces.

  • Write(TextWriter writer, Exception exception) - Writes a non-secret diagnostic for an unexpected exception.

Picket.Security.EndpointGuard

Validates outbound provider endpoints before live verification or analysis can contact them.

  • Evaluate(Uri endpoint, EndpointGuardOptions options) - Evaluates an endpoint by resolving its host with the platform DNS resolver.
  • Evaluate(Uri endpoint, IReadOnlyList<IPAddress> resolvedAddresses, EndpointGuardOptions options) - Evaluates an endpoint with caller-supplied resolved addresses.
  • IsNonPublicAddress(IPAddress address) - Returns a value indicating whether an IP address is non-public for outbound verification purposes.

Picket.Security.EndpointGuardBlockReason

Describes why an outbound endpoint was blocked.

  • DnsFailure - The endpoint host could not be resolved.
  • MetadataHost - The endpoint host is a known metadata service host.
  • NonHttpsScheme - The endpoint uses a non-HTTPS scheme while HTTPS is required.
  • NonPublicAddress - The endpoint resolved to a loopback, private, link-local, reserved, or otherwise non-public address.
  • None - The endpoint is allowed.
  • RelativeUri - The endpoint URI is not absolute.

Picket.Security.EndpointGuardHttpHandlerFactory

Creates HTTP handlers that enforce endpoint guard checks against the address used for each socket connection.

  • Create(EndpointGuardHttpHandlerOptions options) - Creates a sockets-based HTTP handler with redirects disabled and connect-time endpoint checks enabled.

Picket.Security.EndpointGuardHttpHandlerOptions

Configures a guarded HTTP handler created by the endpoint guard HTTP handler factory.

  • AddressResolver - Gets or sets the optional address resolver used before connecting a socket.
  • EnabledSslProtocols - Gets or sets the TLS protocols enabled for HTTPS connections.
  • EndpointGuardOptions - Gets or sets the endpoint guard options applied to the actual connected address.
  • Proxy - Gets or sets the optional proxy used by the handler.

Picket.Security.EndpointGuardOptions

Configures outbound endpoint safety checks.

  • CreateDefault() - Creates default endpoint guard options for live verification.
  • AllowNonPublicAddresses - Gets or sets a value indicating whether loopback, private, link-local, reserved, and other non-public addresses are allowed.
  • RequireHttps - Gets or sets a value indicating whether HTTPS is required.

Picket.Security.EndpointGuardResult

Represents an outbound endpoint safety decision.

  • Allow() - Creates an allowed endpoint decision.
  • Block(EndpointGuardBlockReason reason, string message) - Creates a blocked endpoint decision.
  • BlockReason - Gets the reason the endpoint was blocked.
  • IsAllowed - Gets a value indicating whether the endpoint is allowed.
  • Message - Gets a non-secret diagnostic message.