JwtEncryptionSettings Class
How a JWT the authorization server issues for itself is encrypted. Reused, one instance per service token type. Whether the token is encrypted at all is governed by Encrypt; this block only selects the key-management algorithm and key used when it is.
public record JwtEncryptionSettings : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings>Inheritance System.Object → JwtEncryptionSettings
Implements System.IEquatable<JwtEncryptionSettings>
Remarks
The content-encryption algorithm (the JWE enc) is not per-key, so it is not carried here; it stays
on the root DefaultContentEncryptionAlgorithm.
Properties
JwtEncryptionSettings.Algorithm Property
The JWE key-management algorithm (the alg header value, e.g. RSA-OAEP-256). When
null it is derived from the selected encryption key's declared alg (RFC 7517
Section 4.4), falling back to RSA-OAEP-256 when the key declares none.
public string? Algorithm { get; set; }Property Value
JwtEncryptionSettings.KeyId Property
The kid of the encryption key to use. When null the first configured encryption key is
chosen; when set, the key with this identifier is pinned.
public string? KeyId { get; set; }