Interface ISamlSigningService
- Namespace
- Fdyay.IdentityServer.Saml.Idp
- Assembly
- Fdyay.IdentityServer.Saml.dll
The certificate this identity provider signs SAML messages with, and the ones its metadata publishes. Duende's.
public interface ISamlSigningServiceRemarks
Duende 8.0.1's ISamlSigningService, measured. Asked for every signed assertion, response and logout message, and
by the metadata endpoint, so a host that signs with an HSM or another store replaces this one service. Registered scoped,
as Duende's is.
Methods
GetAllSigningCertificatesAsync(CancellationToken)
Every current signing certificate, to publish in metadata: one per signing credential that is an X.509 certificate or an RSA key, the RSA keys wrapped in generated certificates.
Task<IReadOnlyList<X509Certificate2>> GetAllSigningCertificatesAsync(CancellationToken ct)Parameters
Returns
GetSigningCertificateAsync(CancellationToken)
The certificate, private key included, to sign the next message with.
Task<X509Certificate2> GetSigningCertificateAsync(CancellationToken ct)Parameters
Returns
Exceptions
- InvalidOperationException
No signing credential is available, it is neither an X.509 certificate nor an RSA key, or the certificate has no private key.
GetSigningCertificateBase64Async(CancellationToken)
The signing certificate's DER bytes, base64-encoded, as metadata carries it.
Task<string> GetSigningCertificateBase64Async(CancellationToken ct)