#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Common\.Configuration](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration 'Abblix\.Oidc\.Server\.Common\.Configuration')

## ServiceTokensOptions Class

The per\-type signing and encryption settings for the four JWTs the authorization server issues for itself\.
Grouping the four here keeps them together and avoids a name clash with the per\-client
[RefreshToken](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.ClientInformation.ClientInfo#Abblix.Oidc.Server.Features.ClientInformation.ClientInfo.RefreshToken 'Abblix\.Oidc\.Server\.Features\.ClientInformation\.ClientInfo\.RefreshToken') \(which governs lifetime and reuse, a
different concern\)\. Each token type signs with RS256 and, when a server encryption key is configured, is
encrypted to it by default, as in prior versions; a host disables encryption for a specific type by
setting that type's [Encrypt](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions#Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions.Encrypt 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions\.Encrypt') to `false`\.

```csharp
public record ServiceTokensOptions : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions>
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → ServiceTokensOptions

Implements [System\.IEquatable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')[ServiceTokensOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokensOptions')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')
### Properties

## ServiceTokensOptions\.AccessToken Property {#Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions.AccessToken}

Settings for the access token\. Like the other service tokens it is encrypted to the server's own key
when one is configured\. A host whose access token is validated by external resource servers against
the published key set \(which hold only the signing public key\) sets
[Encrypt](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions#Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions.Encrypt 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions\.Encrypt') to `false` so the token stays a readable signed JWS\.

```csharp
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions AccessToken { get; set; }
```

#### Property Value
[ServiceTokenOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions')

## ServiceTokensOptions\.InitialAccessToken Property {#Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions.InitialAccessToken}

Settings for the initial access token \(RFC 7591 Section 3\)\. A server round\-trip value, read back only
by the server, so encrypting it to the server's own key is safe\.

```csharp
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions InitialAccessToken { get; set; }
```

#### Property Value
[ServiceTokenOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions')

## ServiceTokensOptions\.RefreshToken Property {#Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions.RefreshToken}

Settings for the refresh token\. A server round\-trip value \(issued, stored opaquely by the holder,
presented back and validated by the server\), so encrypting it to the server's own key both protects
its contents at rest and is read back by the server itself\.

```csharp
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions RefreshToken { get; set; }
```

#### Property Value
[ServiceTokenOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions')

## ServiceTokensOptions\.RegistrationAccessToken Property {#Abblix.Oidc.Server.Common.Configuration.ServiceTokensOptions.RegistrationAccessToken}

Settings for the registration access token \(RFC 7592\)\. A server round\-trip value, read back only by
the server, so encrypting it to the server's own key is safe\.

```csharp
public Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions RegistrationAccessToken { get; set; }
```

#### Property Value
[ServiceTokenOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ServiceTokenOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ServiceTokenOptions')