IResourceKeysProvider Interface

Supplies the encryption keys a protected resource publishes, so an access token minted for it can be encrypted to the party that reads it rather than to this server.

public interface IResourceKeysProvider

Derived
↳ ResourceKeysProvider

Remarks

The service-side counterpart of IClientKeysProvider: same two forms (inline in the registration, or fetched from a JWKS URI), same SSRF-protected and cached path. Only the owner differs, and with it who can decrypt the result.

Methods

IResourceKeysProvider.GetEncryptionKeys(ResourceDefinition) Method

Retrieves the encryption keys published by the given resource.

System.Collections.Generic.IAsyncEnumerable<Abblix.Jwt.JsonWebKey> GetEncryptionKeys(Abblix.Oidc.Server.Common.Constants.ResourceDefinition definition);

Parameters

definition ResourceDefinition

The registered definition of the resource.

Returns

System.Collections.Generic.IAsyncEnumerable<JsonWebKey>
The resource's encryption keys, empty when it publishes none, which is how a resource says it accepts a signed JWS.