ServiceTokensOptions Class
The per-type signing and encryption settings for the four JWTs the authorization server issues for itself.
Grouping the four here keeps them together and avoids a name clash with the per-client
RefreshToken (which governs lifetime and reuse, a
different concern). Each token type signs with RS256 and, when a server encryption key is configured, is
encrypted to it by default, as in prior versions; a host disables encryption for a specific type by
setting that type's Encrypt to false.
public record ServiceTokensOptions : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions>Inheritance System.Object → ServiceTokensOptions
Implements System.IEquatable<ServiceTokensOptions>
Properties
ServiceTokensOptions.AccessToken Property
Settings for the access token. Like the other service tokens it is encrypted to the server's own key
when one is configured. A host whose access token is validated by external resource servers against
the published key set (which hold only the signing public key) sets
Encrypt to false so the token stays a readable signed JWS.
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions AccessToken { get; set; }Property Value
ServiceTokensOptions.InitialAccessToken Property
Settings for the initial access token (RFC 7591 Section 3). A server round-trip value, read back only by the server, so encrypting it to the server's own key is safe.
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions InitialAccessToken { get; set; }Property Value
ServiceTokensOptions.RefreshToken Property
Settings for the refresh token. A server round-trip value (issued, stored opaquely by the holder, presented back and validated by the server), so encrypting it to the server's own key both protects its contents at rest and is read back by the server itself.
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions RefreshToken { get; set; }Property Value
ServiceTokensOptions.RegistrationAccessToken Property
Settings for the registration access token (RFC 7592). A server round-trip value, read back only by the server, so encrypting it to the server's own key is safe.
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions RegistrationAccessToken { get; set; }