ISecurityEventTokenSigner Interface

Turns a built SET into its signed compact serialization: the bridge between this package's token model and whatever cryptography the host runs.

public interface ISecurityEventTokenSigner

Derived
↳ DefaultSecurityEventTokenSigner

Remarks

The signer owns everything the model deliberately does not: which key signs, which algorithm the "alg" header declares, whether a JWE layer wraps the result. RFC 8417 Section 5.1 sets the bar an implementation must meet: unless the token's integrity is ensured by other means, "it MUST be signed using JWS by an issuer that is trusted to do so for the use case". The default implementation binds to the Abblix JWT core; a host with keys behind a boundary this process cannot cross - an HSM, a key vault - substitutes its own.

Methods

ISecurityEventTokenSigner.SignAsync(SecurityEventToken, CancellationToken) Method

Signs the SET and returns its compact serialization.

System.Threading.Tasks.Task<string> SignAsync(Abblix.SecurityEvents.SecurityEventToken token, System.Threading.CancellationToken cancellationToken=default(System.Threading.CancellationToken));