SignedMetadataProvider Class

Signs the discovery document with one of this provider's own signing keys, per RFC 8414 §2.1.

public class SignedMetadataProvider : Abblix.Oidc.Server.Endpoints.Configuration.Interfaces.ISignedMetadataProvider

Inheritance System.Object → SignedMetadataProvider

Implements ISignedMetadataProvider

Constructors

SignedMetadataProvider(IJsonWebTokenCreator, IAuthServiceKeysProvider, TimeProvider) Constructor

Signs the discovery document with one of this provider's own signing keys, per RFC 8414 §2.1.

public SignedMetadataProvider(Abblix.Jwt.IJsonWebTokenCreator jwtCreator, Abblix.Oidc.Server.Common.Interfaces.IAuthServiceKeysProvider serviceKeysProvider, System.TimeProvider clock);

Parameters

`jwtCreator` IJsonWebTokenCreator

Issues the JWS.

`serviceKeysProvider` IAuthServiceKeysProvider

Supplies this provider's signing keys.

`clock` System.TimeProvider

Stamps iat.

Methods

SignedMetadataProvider.SignAsync(ConfigurationResponse) Method

Signs metadata and returns the compact JWS.

public System.Threading.Tasks.Task<string> SignAsync(Abblix.Oidc.Server.Model.ConfigurationResponse metadata);

Parameters

`metadata` ConfigurationResponse

The fully assembled metadata, including resolved endpoint URLs and any mTLS aliases, and without signed_metadata itself: RFC 8414 §2.1 has the bundle assert the metadata, not restate its own signature.

Implements SignAsync(ConfigurationResponse)