#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Common\.Configuration](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration 'Abblix\.Oidc\.Server\.Common\.Configuration')

## TrustedIssuer Class

Represents a trusted external identity provider for JWT Bearer grant type\.

```csharp
public record TrustedIssuer : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.TrustedIssuer>
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → TrustedIssuer

Implements [System\.IEquatable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')[TrustedIssuer](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.TrustedIssuer 'Abblix\.Oidc\.Server\.Common\.Configuration\.TrustedIssuer')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')
### Properties

## TrustedIssuer\.AllowedAlgorithms Property {#Abblix.Oidc.Server.Common.Configuration.TrustedIssuer.AllowedAlgorithms}

The list of allowed signing algorithms for JWT assertions from this issuer\.
If specified, JWTs signed with algorithms not in this list will be rejected\.
If null or empty, the default secure algorithms are used: RS256, RS384, RS512, ES256, ES384, ES512\.

```csharp
public string[]? AllowedAlgorithms { get; init; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')[\[\]](https://learn.microsoft.com/en-us/dotnet/api/system.array 'System\.Array')

### Remarks
This provides defense against algorithm substitution attacks \(e\.g\., CVE\-2015\-9235\)\.
The 'none' algorithm is never allowed regardless of this setting\.

## TrustedIssuer\.AllowedScopes Property {#Abblix.Oidc.Server.Common.Configuration.TrustedIssuer.AllowedScopes}

The list of allowed scopes that can be requested when using JWT assertions from this issuer\.
If null, all scopes are allowed\. If specified, only listed scopes will be granted\.

```csharp
public string[]? AllowedScopes { get; init; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')[\[\]](https://learn.microsoft.com/en-us/dotnet/api/system.array 'System\.Array')

## TrustedIssuer\.Description Property {#Abblix.Oidc.Server.Common.Configuration.TrustedIssuer.Description}

Optional description of this trusted issuer for documentation and logging purposes\.

```csharp
public string? Description { get; init; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')

## TrustedIssuer\.Issuer Property {#Abblix.Oidc.Server.Common.Configuration.TrustedIssuer.Issuer}

The issuer identifier \(iss claim value\) of the trusted identity provider\.
Must exactly match the 'iss' claim in JWT assertions from this provider\.

```csharp
public string Issuer { get; init; }
```

#### Property Value
[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')

### Example
https://accounts.google.com

## TrustedIssuer\.JwksUri Property {#Abblix.Oidc.Server.Common.Configuration.TrustedIssuer.JwksUri}

The URL to the JSON Web Key Set \(JWKS\) endpoint for this issuer\.
Used to retrieve public keys for verifying JWT assertion signatures\.

```csharp
public System.Uri JwksUri { get; init; }
```

#### Property Value
[System\.Uri](https://learn.microsoft.com/en-us/dotnet/api/system.uri 'System\.Uri')

### Example
https://accounts.google.com/.well-known/jwks.json

### Remarks
Typically this is the issuer's \.well\-known/jwks\.json endpoint\.
The keys will be cached and refreshed according to standard JWKS caching policies\.