Skip to content

JwtSigningSettings Class

The signing settings for a JWT the authorization server issues for itself. Reused, one instance per service token type, so each type carries its own explicit JWS alg and signing-key selection instead of the previously hardcoded RS256.

C#
public record JwtSigningSettings : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.JwtSigningSettings>

Inheritance System.Object → JwtSigningSettings

Implements System.IEquatable<JwtSigningSettings>

Properties

JwtSigningSettings.Algorithm Property

The JWS signing algorithm (the alg header value, e.g. RS256, ES256). Defaults to RS256 so that, left unset, the token is byte-identical to what the server issued before this setting existed.

C#
public string Algorithm { get; set; }

Property Value

System.String

JwtSigningSettings.KeyId Property

The kid of the signing key to use. When null the first key matching Algorithm is chosen (RFC 7517 Section 4.4); when set, the key with this identifier is pinned and its kid is emitted in the JWS header.

C#
public string? KeyId { get; set; }

Property Value

System.String