#### [Abblix\.Oidc\.Server](https://www.abblix.com/en/docs/api/abblix-oidc-server 'index')
### [Abblix\.Oidc\.Server\.Features\.ResourceIndicators](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.ResourceIndicators 'Abblix\.Oidc\.Server\.Features\.ResourceIndicators')

## IResourceKeysProvider Interface

Supplies the encryption keys a protected resource publishes, so an access token minted for it can be
encrypted to the party that reads it rather than to this server\.

```csharp
public interface IResourceKeysProvider
```

Derived  
↳ [ResourceKeysProvider](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.ResourceIndicators.ResourceKeysProvider 'Abblix\.Oidc\.Server\.Features\.ResourceIndicators\.ResourceKeysProvider')

### Remarks
The service\-side counterpart of [IClientKeysProvider](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Features.ClientInformation.IClientKeysProvider 'Abblix\.Oidc\.Server\.Features\.ClientInformation\.IClientKeysProvider'): same two forms
\(inline in the registration, or fetched from a JWKS URI\), same SSRF\-protected and cached path\. Only the
owner differs, and with it who can decrypt the result\.
### Methods

## IResourceKeysProvider\.GetEncryptionKeys\(ResourceDefinition\) Method {#Abblix.Oidc.Server.Features.ResourceIndicators.IResourceKeysProvider.GetEncryptionKeys(Abblix.Oidc.Server.Common.Constants.ResourceDefinition)}

Retrieves the encryption keys published by the given resource\.

```csharp
System.Collections.Generic.IAsyncEnumerable<Abblix.Jwt.JsonWebKey> GetEncryptionKeys(Abblix.Oidc.Server.Common.Constants.ResourceDefinition definition);
```
#### Parameters

###### `definition` [ResourceDefinition](https://www.abblix.com/en/docs/api/abblix-oidc-server/Abblix.Oidc.Server.Common.Constants.ResourceDefinition 'Abblix\.Oidc\.Server\.Common\.Constants\.ResourceDefinition') {#Abblix.Oidc.Server.Features.ResourceIndicators.IResourceKeysProvider.GetEncryptionKeys(Abblix.Oidc.Server.Common.Constants.ResourceDefinition).definition}

The registered definition of the resource\.

#### Returns
[System\.Collections\.Generic\.IAsyncEnumerable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.iasyncenumerable-1 'System\.Collections\.Generic\.IAsyncEnumerable\`1')[JsonWebKey](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.JsonWebKey 'Abblix\.Jwt\.JsonWebKey')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.iasyncenumerable-1 'System\.Collections\.Generic\.IAsyncEnumerable\`1')  
The resource's encryption keys, empty when it publishes none, which is how a resource says it
            accepts a signed JWS\.