Cette page n'a pas encore été traduite.
ClientSecretOptions Class
Configuration options for generating client secrets in OAuth2/OpenID Connect authentication.
public record ClientSecretOptions : System.IEquatable<Abblix.Oidc.Server.Common.Configuration.ClientSecretOptions>Inheritance System.Object → ClientSecretOptions
Implements System.IEquatable<ClientSecretOptions>
Properties
ClientSecretOptions.ExpiresAfter Property
The expiration duration for the client secret. Defines how long after creation the secret will remain valid. Default value is 30 days.
public System.TimeSpan ExpiresAfter { get; init; }Property Value
ClientSecretOptions.Length Property
The length of the generated client secret, in characters.
The default is 32: a client authenticating with client_secret_jwt (OpenID Connect
Core §9) uses the secret's UTF-8 bytes as the HMAC key, and RFC 7518 §3.2 requires an HS256
key of at least 32 bytes. A host whose clients sign with HS384 or HS512 should raise this to
48 or 64 respectively so the derived key meets that algorithm's floor.
public int Length { get; init; }