#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')

## Abblix\.Oidc\.Server\.Common\.Configuration Namespace

| Classes | |
| :--- | :--- |
| [BackChannelAuthenticationOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.BackChannelAuthenticationOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.BackChannelAuthenticationOptions') | Provides configuration options for the backchannel authentication process\. |
| [BackChannelLogoutOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.BackChannelLogoutOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.BackChannelLogoutOptions') | Back\-channel logout settings for a single client, as defined by the OpenID Connect Back\-Channel Logout 1\.0 specification\. The OP delivers a signed logout token directly \(server\-to\-server\) to the configured endpoint when an end\-session occurs, bypassing the user agent\. |
| [CheckSessionCookieOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.CheckSessionCookieOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.CheckSessionCookieOptions') | Defines options for the session check cookie used in monitoring changes in session status\. |
| [ClientIdOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ClientIdOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ClientIdOptions') | Represents options for generating client IDs\. |
| [ClientJwksConfigurationExtensions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ClientJwksConfigurationExtensions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ClientJwksConfigurationExtensions') | Configuration\-time extensions that populate [Jwks](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.ClientInformation.ClientInfo#Abblix.Oidc.Server.Features.ClientInformation.ClientInfo.Jwks 'Abblix\.Oidc\.Server\.Features\.ClientInformation\.ClientInfo\.Jwks') from raw configuration sections by binding into [JsonWebKeySetSettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySetSettings 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySetSettings') \(a flat DTO that [Microsoft\.Extensions\.Configuration](https://learn.microsoft.com/en-us/dotnet/api/microsoft.extensions.configuration 'Microsoft\.Extensions\.Configuration') can handle natively\) and mapping to the polymorphic [JsonWebKey](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.JsonWebKey 'Abblix\.Jwt\.JsonWebKey') hierarchy\. |
| [ClientSecretOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.ClientSecretOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.ClientSecretOptions') | Configuration options for generating client secrets in OAuth2/OpenID Connect authentication\. |
| [DeviceAuthorizationOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DeviceAuthorizationOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.DeviceAuthorizationOptions') | Provides configuration options for the Device Authorization Grant \(RFC 8628\)\. |
| [DiscoveryOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DiscoveryOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.DiscoveryOptions') | Defines discovery endpoint options\. |
| [DPoPNonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DPoPNonceOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.DPoPNonceOptions') | DPoP\-specific extension of [NonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions') per RFC 9449 §8\. Inherits the generic primitive's `AcceptanceWindow` and `RotationInterval` so DPoP can override them independently of any other nonce\-service consumer, and adds the per\-endpoint policy that says which OAuth endpoints reject DPoP proofs without a `nonce` claim \(responding with `use_dpop_nonce` and a fresh `DPoP-Nonce` header\)\. |
| [DPoPOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.DPoPOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.DPoPOptions') | Configuration options for OAuth 2\.0 DPoP \(RFC 9449\), covering the proof validator's `iat` tolerance and DPoP\-specific nonce policy\. The nonce sub\-section inherits from the generic [NonceOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.Nonces.NonceOptions 'Abblix\.Oidc\.Server\.Features\.Nonces\.NonceOptions') so DPoP can configure stricter values independently of other nonce\-service consumers without duplicating field definitions\. |
| [FrontChannelLogoutOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.FrontChannelLogoutOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.FrontChannelLogoutOptions') | Front\-channel logout settings for a single client, as defined by the OpenID Connect Front\-Channel Logout 1\.0 specification\. Tells the authorization server which URL to load in a hidden iframe during end\-session processing and whether the iframe URL must carry the user's session identifier\. |
| [JsonWebKeySetSettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySetSettings 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySetSettings') | Flat configuration DTO for a [JsonWebKeySet](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.JsonWebKeySet 'Abblix\.Jwt\.JsonWebKeySet'), mirroring RFC 7517 Section 5 \(a JSON object with a single `keys` array\)\. See [JsonWebKeySettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySettings') for the per\-key DTO and the design rationale\. |
| [JsonWebKeySettings](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySettings') | Flat configuration DTO for a single JSON Web Key, suitable for binding via `Microsoft.Extensions.Configuration` which cannot instantiate the abstract [JsonWebKey](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.JsonWebKey 'Abblix\.Jwt\.JsonWebKey') base type directly\. All cryptographic byte\-array members are bound as base64url\-encoded strings per RFC 7517; [ToJsonWebKey\(\)](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings#Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings.ToJsonWebKey() 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySettings\.ToJsonWebKey\(\)') decodes them and maps the flat shape to the correct concrete subtype based on [Kty](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings#Abblix.Oidc.Server.Common.Configuration.JsonWebKeySettings.Kty 'Abblix\.Oidc\.Server\.Common\.Configuration\.JsonWebKeySettings\.Kty')\. |
| [JwtBearerOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.JwtBearerOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.JwtBearerOptions') | Configuration options for JWT Bearer grant type \(RFC 7523\)\. Defines trusted external identity providers whose JWT assertions can be exchanged for access tokens\. |
| [MtlsAliasesOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.MtlsAliasesOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.MtlsAliasesOptions') | Options for RFC 8705 mTLS endpoint aliases in discovery\. Allows explicitly setting alias URIs\. Use DiscoveryOptions\.MtlsBaseUri to auto\-compute aliases\. |
| [NewClientOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.NewClientOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.NewClientOptions') | Defaults used by the dynamic client registration endpoint when minting credentials for a newly registered client: how its client identifier and client secret are generated and how long the secret stays valid\. |
| [OidcOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.OidcOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.OidcOptions') | The root of the OIDC configuration\. Provides the simplest way to configure and start your OIDC server\. |
| [SoftwareStatementOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.SoftwareStatementOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.SoftwareStatementOptions') | Configuration options for software statement validation per RFC 7591 Section 2\.3\. Software statements are signed JWTs issued by a third\-party authority asserting metadata values about the client software\. |
| [TrustedIssuer](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.TrustedIssuer 'Abblix\.Oidc\.Server\.Common\.Configuration\.TrustedIssuer') | Represents a trusted external identity provider for JWT Bearer grant type\. |

| Structs | |
| :--- | :--- |
| [RefreshTokenOptions](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.RefreshTokenOptions 'Abblix\.Oidc\.Server\.Common\.Configuration\.RefreshTokenOptions') | Lifetime and reuse policy for refresh tokens issued by the token endpoint\. Combines an absolute ceiling with an optional sliding window so long\-running sessions stay alive only while the client keeps using them\. |

| Enums | |
| :--- | :--- |
| [OidcEndpoints](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Configuration.OidcEndpoints 'Abblix\.Oidc\.Server\.Common\.Configuration\.OidcEndpoints') | Flags representing the various OpenID Connect \(OIDC\) endpoints that the provider can expose\. These flags enable fine\-grained control over which endpoints are enabled or disabled\. |