Skip to content

JwtEncryptionSettings Class

How a JWT the authorization server issues for itself is encrypted. Reused, one instance per service token type. Whether the token is encrypted at all is governed by Encrypt; this block only selects the key-management algorithm and key used when it is.

C#
public record JwtEncryptionSettings : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings>

Inheritance System.Object → JwtEncryptionSettings

Implements System.IEquatable<JwtEncryptionSettings>

Remarks

The content-encryption algorithm (the JWE enc) is not per-key, so it is not carried here; it stays on the root DefaultContentEncryptionAlgorithm.

Properties

JwtEncryptionSettings.Algorithm Property

The JWE key-management algorithm (the alg header value, e.g. RSA-OAEP-256). When null it is derived from the selected encryption key's declared alg (RFC 7517 Section 4.4), falling back to RSA-OAEP-256 when the key declares none.

C#
public string? Algorithm { get; set; }

Property Value

System.String

JwtEncryptionSettings.KeyId Property

The kid of the encryption key to use. When null the first configured encryption key is chosen; when set, the key with this identifier is pinned.

C#
public string? KeyId { get; set; }

Property Value

System.String