AuthServiceKeyDescriptor Class
A service key together with the lifecycle metadata that lives AROUND it, never on it - the JsonWebKey stays a pure JOSE / RFC 7517 model. This is the unit a persistent store saves at generation and the read seam gates by time; the durable backend and the rotation that advances Status ship separately.
public sealed record AuthServiceKeyDescriptor : System.IEquatable<Abblix.Oidc.Server.Common.AuthServiceKeyDescriptor>Inheritance System.Object → AuthServiceKeyDescriptor
Implements System.IEquatable<AuthServiceKeyDescriptor>
Constructors
AuthServiceKeyDescriptor(JsonWebKey, KeyLifecycleStatus, DateTimeOffset, DateTimeOffset, DateTimeOffset) Constructor
A service key together with the lifecycle metadata that lives AROUND it, never on it - the JsonWebKey stays a pure JOSE / RFC 7517 model. This is the unit a persistent store saves at generation and the read seam gates by time; the durable backend and the rotation that advances Status ship separately.
public AuthServiceKeyDescriptor(Abblix.Jwt.JsonWebKey Key, Abblix.Oidc.Server.Common.KeyLifecycleStatus Status, System.DateTimeOffset NotBefore, System.DateTimeOffset NotAfter, System.DateTimeOffset DeleteAfter);Parameters
Key JsonWebKey
The key itself. Its use is the standard JOSE member on the key; secret material
is present for a local key and absent for an external one (whose private half lives with a custodian).
Status KeyLifecycleStatus
The lifecycle state; see KeyLifecycleStatus.
NotBefore System.DateTimeOffset
When the key becomes eligible to sign.
NotAfter System.DateTimeOffset
When the key stops signing. After this the key still verifies published tokens until DeleteAfter.
DeleteAfter System.DateTimeOffset
When the key may be removed from publication entirely. It is NotAfter plus the maximum lifetime of any token the key could have signed, so no live token can still reference it.
Properties
AuthServiceKeyDescriptor.DeleteAfter Property
When the key may be removed from publication entirely. It is NotAfter plus the maximum lifetime of any token the key could have signed, so no live token can still reference it.
public System.DateTimeOffset DeleteAfter { get; init; }Property Value
AuthServiceKeyDescriptor.Key Property
The key itself. Its use is the standard JOSE member on the key; secret material
is present for a local key and absent for an external one (whose private half lives with a custodian).
public Abblix.Jwt.JsonWebKey Key { get; init; }Property Value
AuthServiceKeyDescriptor.NotAfter Property
When the key stops signing. After this the key still verifies published tokens until DeleteAfter.
public System.DateTimeOffset NotAfter { get; init; }Property Value
AuthServiceKeyDescriptor.NotBefore Property
When the key becomes eligible to sign.
public System.DateTimeOffset NotBefore { get; init; }Property Value
AuthServiceKeyDescriptor.Status Property
The lifecycle state; see KeyLifecycleStatus.
public Abblix.Oidc.Server.Common.KeyLifecycleStatus Status { get; init; }