#### [Abblix\.Jwt\.Vault](https://www.abblix.com/en/docs/api/abblix-jwt-vault 'index')
### [Abblix\.Jwt\.Vault](https://www.abblix.com/en/docs/api/abblix-jwt-vault/Abblix.Jwt.Vault 'Abblix\.Jwt\.Vault')

## VaultTransitOptions Class

Points the custodian at a HashiCorp Vault / OpenBao Transit secrets engine: where it is and how to
authenticate to it, and nothing about which keys to use\. Which keys, and therefore whether their private
halves ever enter this process, is the placement choice that follows the custodian registration\.

```csharp
public sealed class VaultTransitOptions
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → VaultTransitOptions
### Properties

## VaultTransitOptions\.Address Property {#Abblix.Jwt.Vault.VaultTransitOptions.Address}

Base URL of the Vault / OpenBao server, e\.g\. `http://127.0.0.1:8200`\.

```csharp
public string Address { get; set; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')

## VaultTransitOptions\.Authentication Property {#Abblix.Jwt.Vault.VaultTransitOptions.Authentication}

Makes the package log in to Vault itself \- with the pod's Kubernetes service account or an AppRole \-
and keep the resulting token renewed for the process lifetime\. Absent by default: a host that hands
over [Token](https://www.abblix.com/en/docs/api/abblix-jwt-vault/Abblix.Jwt.Vault.VaultTransitOptions#Abblix.Jwt.Vault.VaultTransitOptions.Token 'Abblix\.Jwt\.Vault\.VaultTransitOptions\.Token') keeps owning it\.

```csharp
public Abblix.Jwt.Vault.VaultAuthenticationOptions? Authentication { get; set; }
```

#### Property Value
[VaultAuthenticationOptions](https://www.abblix.com/en/docs/api/abblix-jwt-vault/Abblix.Jwt.Vault.VaultAuthenticationOptions 'Abblix\.Jwt\.Vault\.VaultAuthenticationOptions')

## VaultTransitOptions\.PooledConnectionLifetime Property {#Abblix.Jwt.Vault.VaultTransitOptions.PooledConnectionLifetime}

How long a pooled HTTP connection is reused before it is recycled\. The Transit client is held long\-lived by
the singleton key store, so recycling connections lets it pick up DNS changes without handler rotation
\(default 2 minutes, matching the default IHttpClientFactory handler lifetime\)\.

```csharp
public System.TimeSpan PooledConnectionLifetime { get; set; }
```

#### Property Value
[System\.TimeSpan](https://learn.microsoft.com/en-us/dotnet/api/system.timespan 'System\.TimeSpan')

## VaultTransitOptions\.Token Property {#Abblix.Jwt.Vault.VaultTransitOptions.Token}

Auth token presented as the `X-Vault-Token` header, for a host that already has one and owns its
lifetime\. Source it from the environment or a secret store, never hardcode it\. A production host
normally configures [Authentication](https://www.abblix.com/en/docs/api/abblix-jwt-vault/Abblix.Jwt.Vault.VaultTransitOptions#Abblix.Jwt.Vault.VaultTransitOptions.Authentication 'Abblix\.Jwt\.Vault\.VaultTransitOptions\.Authentication') instead, which REPLACES this value outright: a stale
token left in configuration is then never presented, not even before the first login completes\.

```csharp
public string? Token { get; set; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')

## VaultTransitOptions\.TransitMount Property {#Abblix.Jwt.Vault.VaultTransitOptions.TransitMount}

Mount path of the Transit engine \(the default mount is `transit`\)\.

```csharp
public string TransitMount { get; set; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')