#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Common\.Configuration](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration 'Abblix\.Oidc\.Server\.Common\.Configuration')

## JwtEncryptionSettings Class

How a JWT the authorization server issues for itself is encrypted\. Reused, one instance per service token
type\. Whether the token is encrypted at all is governed by [Encrypt](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions#Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions.Encrypt 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions\.Encrypt'); this
block only selects the key\-management algorithm and key used when it is\.

```csharp
public record JwtEncryptionSettings : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings>
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → JwtEncryptionSettings

Implements [System\.IEquatable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')[JwtEncryptionSettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings 'Abblix\.Oidc\.Server\.Common\.Configuration\.JwtEncryptionSettings')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')

### Remarks
The content\-encryption algorithm \(the JWE `enc`\) is not per\-key, so it is not carried here; it stays
on the root [DefaultContentEncryptionAlgorithm](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.OidcOptions#Abblix.Oidc.Server.Common.Configuration.OidcOptions.DefaultContentEncryptionAlgorithm 'Abblix\.Oidc\.Server\.Common\.Configuration\.OidcOptions\.DefaultContentEncryptionAlgorithm')\.
### Properties

## JwtEncryptionSettings\.Algorithm Property {#Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings.Algorithm}

The JWE key\-management algorithm \(the `alg` header value, e\.g\. `RSA-OAEP-256`\)\. When
`null` it is derived from the selected encryption key's declared `alg` \(RFC 7517
Section 4\.4\), falling back to `RSA-OAEP-256` when the key declares none\.

```csharp
public string? Algorithm { get; set; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')

## JwtEncryptionSettings\.KeyId Property {#Abblix.Oidc.Server.Common.Configuration.JwtEncryptionSettings.KeyId}

The `kid` of the encryption key to use\. When `null` the first configured encryption key is
chosen; when set, the key with this identifier is pinned\.

```csharp
public string? KeyId { get; set; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')